HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Obfuscates, not hides, roles?

Great plugin, something I really needed.

However instead of hiding the role name completely it just obfuscates it, is that how it's supposed to work? Here's the list of roles on my forum:

Administrators, hr790281419293056, Donators, hr34471419293061

Those two hr### are the roles I've hidden. I'd prefer they just not get output at all...

Comments

  • x00x00 MVP
    edited December 2014

    They are not completely removed, becuase it wasn't intended as a comprehensive solution. Those roles are supposed to be removed before output, or if not on the server by JavaScript, but it is not full proof, especially with different themes and plugins.

    I think a better solution would not use role at all but some other model, the way there is less possibility then getting revealed, when people use roles.

    grep is your friend.

Sign In or Register to comment.