PDA

View Full Version : A user can delete the own membership


Ifrani
10-30-2001, 06:05 PM
Hiho,

is ist possible to create a hack, that a user can cancel the own membership to a forum ? If a user never want to come back to a site, he can't delete the own membership...

Scott MacVicar
10-30-2001, 06:51 PM
this could be easily abused, if a members account is hacked by someone then they have the ability to remove their access. It could be easily done but I don't think its such a good idea.

Sinecure
10-30-2001, 06:52 PM
Yes, I agree PPN, very good point. I could create a lot of problems.

Scott MacVicar
10-30-2001, 07:04 PM
I could still whip something up, wouldn't take long.

It could probably be made more secure by sending it to their email, but whats to stop them from changing the email first...

Possibly apply to be deleted then admin has to approve it?

Sinecure
10-30-2001, 07:08 PM
Actually that would be a perfect idea. This could also be beneficial if the user wants to start a new username and could simply delete their previous username. That would help in deleting un-active users.

Scott MacVicar
10-30-2001, 07:12 PM
I've already posted a hack to allow users to change their username in the usercp, there is limits for posts and time between changed which can be managed in the admin panel.

I'll do this delete user hack now well i'll start, i'm wondering if 2.2.0 will cause any problems.

Sinecure
10-30-2001, 07:20 PM
hmmm, Only thing I know is that 2.2 uses MD5() Password or something. I dont know if that would be a problem. Perhaps we just have to wait and see :D

Scott MacVicar
10-30-2001, 07:25 PM
how'd you get a copy of 2.2.0 or is it because its installed on the vbulletin server.

DarkReaper
10-30-2001, 10:11 PM
A) He probably has access to it beause its on this server
B) Everyone and their grandma knows that MD5 encryption is in vB 2.2.0 :)