[Smitty]

Thanks for the reply. I know this is an old thread. I had a 'breach' early this morning where someone used a vCard to get someone's email address and connect the person to their employer. I readily admit I had never used a vCard, and had absolutely no idea that it carried the email address a person registered with. I've been using vBulletin since 2001, so call me really, really stupid. As I sit here I can't believe I didn't know what was in a vCard after all these years.

I did what you recommended about 4.30 this morning to close the hole. I also edited the text in the registration and options to boldly tell people if they do turn it on their email address will be available to the public.