Log in

View Full Version : How to Hide Postbit from Guests?


yotsume
09-22-2011, 02:37 PM
How to Hide Postbit from Guests?

How can I hide the entire postbit and postbit_legacy info from guests in vb3.7x?

BirdOPrey5
09-23-2011, 04:26 PM
Edit your postbit (and postbit_legacy) templates...

Put the entire code inside this conditional:


<if condition="!$show[guest]">


*all original code here*

</if>


That will show nothing to anyone who is a guest.

If you want to show something in place of nothing try:


<if condition="!$show[guest]">


*all original code here*

<else />

Guests cannot see this data.

</if>


That said, you should probably just use forum permissions to make guests not be able to view any threads rather than doing this template edit.

yotsume
09-23-2011, 04:37 PM
Thanks but I already coded it myself. Surrounding the entire template does not work and hides the post in a thread as well as the postbit. So I selected which elements I needed to hide and wrapped them and now its all secured and done!

If you ask me VB needs permission settings built in for postbit visibility. In the case of my site being a school site with students, security that is HIPPA compliant is the most important for us. VB has many more security holes related to account data then bugs found in their code.

I also hid some reply and post buttons that fit my situation as well. So I have one forum that is hidden unless you have the direct link to the thread. The thread is just a page cleaned (secured) and created by the admin. :)

BirdOPrey5
09-23-2011, 04:43 PM
Maybe we have a different opinion on what the "postbit" is... to me the postbit is everything in the postbit template.

yotsume
09-23-2011, 05:29 PM
Many add-ons for Vb add info to the postbit. Many of those add-ons are insecure because even when we lock down a site with VB permissions the postbit remains exposed and add-on elements can be clicked taking you to areas of VB that the stock permission system doesn't cover. So I had to do more custom coding to the postbit to lock it down for guests in my case to keep it HIPPA compliant.

In my attached screen shot you can see all postbit info/icons are removed except username and title. The popup menu is disabled as well. CLEANED!