Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Turn off user search functionality if not signed in
If I'm not signed into Vanilla, I can still search for all users in the system, and I can see the e-mail addresses of those users who have their accounts set to "Check here to make your email address visible to other members". The problem is that I'm not a member, so this is misleading. In fact, anyone can see your e-mail address.
Granted, the e-mail addresses are protected so spammers can't easily harvest them, but I may wish for members to contact me, while not wishing for non-members to have this kind of personal information access.
So, either:
A) Turn off member search if not logged in
B) Make A an administrative option
C) Don't display e-mail addresses if not logged in
Which of these options does everyone here prefer?
0
This discussion has been closed.
Comments
I like C