It's not wrong to prefer a modification, however it isn't always possible. And sometimes it is much simpler to just modify the template.

I can certainly understand that nick but as Lynne stated makes since. I merely suggested if it was possible as you were asking if it can be done and didn't state a modification so I thought it was a open field. You may want to ask for this as a request in that section here on the forum and see if someone would whip it up. But with what Lynne posted is the easiest and fastest. You could bookmark this thread so if you ever need it or make a word doc for future needs too.

Lynne,

I wonder if you can help?

You solution removes the link to the members list, but still does not stop people from accessing it..

All people need to know is the name of the page. i.e showgroups.php
If they know that, and append it to the url, they can access the list of members regardless of if they are registered/unregistered, allowed or not allowed to view it.

I found this out because a user did a search on Google and accessed the members list right off the bat. Now my users are moaning about privacy :(

Any ideas how to plug this hole?

Cheers

Chris

Then just create a plugin at the top of that page to not allow unregistered users to see it. Something like (you'll have to look at the page to find a hook_location):