HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
PM's visible for all users [Solved - actually 'wall' posts]
Got a strange problem on my forum:
When you click on a user name you are taken to the profile page of that user (example: http://audi-a2.nl/profile/1899/Audi_gekkie ). On that page all the users private messages are visible for everyone. I have checked permissions etc but I can't find out how to disable this. Any suggestions ? Thanks !
That link only works for logged in users.
Perhaps you could post a screenshot?
However, what I think you are seeing is comments written on the user's 'wall', which are separate to PMs.
I have a lot of trouble getting the difference through to some of my users!
No, it's PM's that are visible under "Recent Activities". http://audi-a2.nl/activity There are all the PM's visible.
Sorry, but I really don't think they are PMs.
You can leave messages on a user's profile wall.
I've just left a message on your wall on this site.
Click your user name to see it.
Then check that there is no message in your PM folder.
Users may be leaving messages on the wall which they assume are PMs (some of my users still do this, despite having been told a great many times), but they are not part of the PM/inbox system, and are visible to any user who has permission to view user profiles.
Well, the clarifies it all. Thanks !