Allow users to delete themselves

This one was requested by Webhost. Personally I can't see the use for this, but a hacker's gotta do what a hacker's gotta do.

Anyway, this one is really simple.

First, create a new template named "deleteself" with this:

<center>Are you sure you want to delete your user account from this message board?<br>
All of your current posts will be set to "Guest".
<b>This is not revertible!</b>

<form action="member2.php" method="post">
<input type="hidden" name="s" value="$session[sessionhash]">
<input type="hidden" name="action" value="killme">
<input type="submit" value="    Yes    " class="bginput">
</form></center>

Now open the attached text file, and add the code from it to member2.php right after this code:

  eval("dooutput(\"".gettemplate("subscribe")."\");");
}

That's it. Now people can go to member2.php?s=&action=deleteme, and if they click Yes there their profile (and the rest of the data associated with that user) will be deleted.

I put in a nice 'done' message, I'll post a screen shot in a minute.

[Psychdrone]

evil!

but nice

[MrBojangle1]

lol, funny but nice

[Nebula]

not sure about this one.

on my website, if someone hacked into someone else's account, and had this feature, they'd delete everyone :-P

but that's my two cents vBulletin is probably pretty hard to hack too

[Matt]

I was about to say the same, I am not gonna install it myself and its down to the individual if they wish to install it but it does prove as a problem for those who do manage to hack into peoples accounts. It happens frequently on boards I use and the option to delete yourself would be so attractive to hackers, some might even start hacking simply to delete a user they dislike

[Velocd]

Why not create a hack that back's up users and all their info?
...wait, already created just use the backup--d'oh

But still, if you made something that allowed users maybe in their profile to select an option that allowed, incase anything happened to their account, it could be backed up. Then there could be some nifty interface in the admin area that contains all users who were deleted and who choosed to have a backup, and all their backups are located there. Where the admin can choose to backup/restore a user to the point before deletion, or just delete / mass purge back ups. In order for it to be a recent backup, all that would need to be done is right before the user deletes themself or admin deletes user, a backup is created (if the user choosed to have a backup). The difference from this and the regular backup Sql dump, is that its easier (with an interface), and that not everything is needed to be backed up (although I'm aware the other way you can do the same, but this is more organized..i think)
YOU know what I mean?!?

Damn..I'm getting way into this, and it probably wouldn't even work...but, maybe If it did, I just created a hack I could possible do?!? .....nah, I'm not that great at php/mysql yet to accomplish such a huge task. *eagerly awaits response by Firefly*

[Birdie501]

Hi firefly,

what about doing it that way?

if the user confirm his deletion, this action will be queued for at least one week before the user will be deleted. If it was a hacker attack and a user uses his account within this period the deletion will be automatically cancelled.

or another possibilty:

Just do it like the registration way. The user will get an email where he has to confirm the deletion! That would also help if the user account has been hacked.

anyway again a great job you did, thanks.

Regards
Birdie501 :classic:

[Floris]

I agree with Birdie501!

When the user selects to delete his account, he will get an E-mail, etc, like with registration. I like that!

Also, what I wanted to ask! Can you make an additional field where users can give a reason? (or select one from drop down list) - Or both! - so we know why they suddenly want to cancell their account?

Additional question: Spoil us! Will this be a feature in vB3? (or similar)

Love to hear your comments firefly! And would love to see an updated file! - vbHacker ready! -

[Admin]

I'm not going to build on this hack, I don't find it very useful and don't think it's worth it (I'm glad Overgrow and Webhost like it tho ).

xiphoid: no this won't be a feature in vB3 (and please stop asking me that question, I'm really not in a position to say that -- simply because I have no idea!).

[Velocd]

The email idea is great, and I'm sure another hacker could figure out that one other than FireFly. Somebody?

[kreftt]

oh firefly this hack is very useful,

in fact every install of the vbulletin software on a german server breaks the law as the privacy laws in this country here say that everyone who offers a registration must allow the user to end his/her subscription, followed by the complete deletion of any data collected from that user (like his email and location).

so i would be very thankful if you could add that email feature into this hack.

tia

kreftt