sorry for the bump but this issue is still unresolved to this day, even in vb4
that whole vcard feature is extremely .... broken, to say the least
there's no warning addressed to users that their email might be publicly visible
crawling bots can harvest the emails and spam
and most of the time, admins don't even know about this feature
should be globally disabled by default and the option to enable it globally should warn the admin about the security risk
|