Admins can view user's PM's

After some requests and a debate in the requests forum I've finally finished the majority of this hack. It allows the admin to find a user via the current method in the control panel then click view user's pm's. They are then shown all the pm's in the users folders.

Includes admin logging and is designed to use the cp.css file which is already used by the control panel. I considered adding a search feature but it would be hard without indexing all of the pm's the way vBulletin already does. This means it would be a very limited search.
You can also now select which admins can view user pm's this is done the same way that restriction to the adminlogging is done, the variable is at the top of pm.php

This hack involves uploading pm.php to the admin directory then following the instructions which requires you adding the two links within /admin/user.php

Updated 25th November 2001 @ 22:39

Update was to fix broken smilies by disabling them and to show pm's in all folders not just the inbox. To update simply upload pm.php to your admin folder again.

Scott

[jucs]

This doesn't work if you have a user name specified like Joe Smith which I do on my board rather than jsmith or something withone word. It gives this error:

Viewing User PM's is restricted.

[Farid]

Great hack!!!
I've installed it and it works perfectly.

PS : I am new here

[Scott MacVicar]

did you read the bit about restricting access to pm?

you need to enter your userid with the variable at the top of pm.php

Scott

[jucs]

I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.

[Psychdrone]

Yes it dose, dude dont come off like that, saying that the hack dosn't work!! YOu did somethign wrong!

[Scott MacVicar]

You've done something wrong,

in no aspect of the code does the hack use the username to get information, it only uses the Userid to get the pm's and then gets the username for that.

If your still getting the error then you have to make sure your userid is correct.

Scott

[jucs]

Ok, I never said it didn't work. It obviously works. I never understood it was USERID and not USERNAME. Me bad. Sorry bout that!

Thanks!

[bira]

I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.

[JTMON]

[QUOTE]Originally posted by jucs
I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.

[JTMON]

[QUOTE]Originally posted by bira
I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.