quick security question

[pagekeeper]

hey,

how do i control who can see the intant messaging options on the post_bit specificly post_legacy - its pretty strange i dont know if this problem was there before but my other admin brought it to my attension that guests can actually see the users emails and details.

its very important that users cant see personal details untill they are respected with a large post count.

[Zachery]

Originally Posted by pagekeeper

hey,

how do i control who can see the intant messaging options on the post_bit specificly post_legacy - its pretty strange i dont know if this problem was there before but my other admin brought it to my attension that guests can actually see the users emails and details.

its very important that users cant see personal details untill they are respected with a large post count.

By default you cant, but if you want to hide it from guests i would suggest this

<if condition="$bbuserinfo[userid] != 0">

icons code here

</if>

[pagekeeper]

its quite a big flaw if you ask me... but no one did so i'll shh.

thanks

[pagekeeper]

what if you specifie a certain post requirement .... say 100posts to see the infomation. then that would work with all users, and would block guests in theory right ?

[Zachery]

<if condition="$bbuserinfo[userid] != 0 AND $bbuserinfo[posts] > 100">

code here

</if>

[SaN-DeeP]

Originally Posted by Zachery

<if condition="$bbuserinfo[userid] != 0 AND $bbuserinfo[posts] > 100">

code here

</if>

Zack, I want to give an option under User Control Panel to my users (like vb.org) to hide/show these details ?

Can you help me on this advanced thingee please ?

I want to hide the details for 3 usergroups.
Guests, Users Waiting Email Confirmation and Banned usergroup.
I am using vb default usergroups.

Regards,