Possible Bug - guests can view contact data in profile

Discuss general development subjects that are not specific to a particular version like the versioning control system we use or other infrastructure.
User avatar
Ger
Registered User
Posts: 270
Joined: Mon Jul 26, 2010 1:55 pm
Location: 192.168.1.100
Contact:

Re: Possible Bug - guests can view contact data in profile

Post by Ger » Tue Mar 15, 2016 11:55 am

As a guest, I see:
<avatar>
Scanialady
Registered User
Posts: 5
Joined: Sat Sep 12, 2015 3:17 pm
Those seem quite relevant for guests to be able to follow the topic and value the posts/person. Nothing personal here.

On phpBB.com I see:
<avatar>
KevC
Support Team Member
Posts: 64793
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:
Contact only shows his website, which isn't private/personal either.
He chose to tell his location, but he could also state something like "Earh" or "Gotham City" if he wanted to. Or his complete address for that matter. One could argue that this profile field is personal information though.
For other (custom) profile fields, you have a setting to either display it in topic view or not. When the nature of the profile field is too personal, you shouldn't display it in profile view, only in the memberlist/profile which are not available for guests.

That's entirely up to the board owner though.
Above message may contain errors in grammar, spelling or wrongly chosen words. This is because I'm not a native speaker. My apologies in advance.

User avatar
Scanialady
Registered User
Posts: 13
Joined: Sat Sep 12, 2015 3:17 pm

Re: Possible Bug - guests can view contact data in profile

Post by Scanialady » Tue Mar 15, 2016 12:00 pm

Thank you, RMcGirr83.

We all know: the most of users don't know what they do. :D
A lot of them is using real names - if not for their board account they use it on Facebook, Google or on other places. So we should not link personal data nowhere for not registered user. And I have seen this problem first after upgrading to 3.1.x. The profile data are very much older (2009), not new entered.

edit: don't forget you have the real name and addresses with a whois for the websites, didn't you?

For me it seems to be the best, all profile data to hide by group permissions (easiest way). Really all, in postings, who is online, birthdays, too.
As I said: the very best is to let the users choose which information they want to share and to whom.

I had not opened a ticket before, but I will do, if nobody else with better English may do it for me

CHItA
Development Team
Development Team
Posts: 128
Joined: Thu Mar 12, 2015 1:43 pm
Location: Budapest, Hungary

Re: Possible Bug - guests can view contact data in profile

Post by CHItA » Tue Mar 15, 2016 12:06 pm

I think the option to set who you want to share your contact information with would be a nice feature, but it is not a bug IMHO.

About the legal stuff: in general I think we cannot really do much about that, as there is no such thing as 'EU law', so we are left with all the regulations one country might have, which is impossible to keep up with in the core.

User avatar
Dragosvr92
Registered User
Posts: 624
Joined: Tue May 31, 2011 12:08 pm
Location: Romania
Contact:

Re: Possible Bug - guests can view contact data in profile

Post by Dragosvr92 » Tue Mar 15, 2016 5:09 pm

Ones contact information should not be displayed to guests and foes by default.
Im not sure if it is a need for special changeable permissions.... like group based. Well... Maybe they should incase we have a group for spammers or other banned members.
Previous user: TheKiller
Avatar on Memberlist 1.0.3

User avatar
Scanialady
Registered User
Posts: 13
Joined: Sat Sep 12, 2015 3:17 pm

Re: Possible Bug - guests can view contact data in profile

Post by Scanialady » Tue Mar 15, 2016 10:21 pm

a spammers group does not ban guests. So all profile data should be hidden on every place by permissions. If a board owner want to let it view he should can allow - but by default we should protect it.

User avatar
VSE
Extension Customisations
Extension Customisations
Posts: 670
Joined: Mon Mar 08, 2010 9:18 am

Re: Possible Bug - guests can view contact data in profile

Post by VSE » Thu Mar 17, 2016 5:29 pm

No, not a bug. Guests have always been capable of viewing the contact profiles...since at least phpBB 2 IIRC.
Has an irascible disposition.

User avatar
Scanialady
Registered User
Posts: 13
Joined: Sat Sep 12, 2015 3:17 pm

Re: Possible Bug - guests can view contact data in profile

Post by Scanialady » Thu Mar 17, 2016 6:38 pm

Ok, I understand this is no bug, it is a "feature".

But at the time phpbb 2 was up to date there we have had another meaning of privacy and no lawyers to hunt us. I have migrated my board, I can not see if it was the same on phpbb 3, too.

If privacy is not important enough under phpBB to align permissions depending on profile information I use my own solution.

Thank you for this discussion.

CHItA
Development Team
Development Team
Posts: 128
Joined: Thu Mar 12, 2015 1:43 pm
Location: Budapest, Hungary

Re: Possible Bug - guests can view contact data in profile

Post by CHItA » Thu Mar 17, 2016 7:37 pm

Scanialady wrote:
Thu Mar 17, 2016 6:38 pm
Ok, I understand this is no bug, it is a "feature".
What we said was that this is not a bug, but it would be a nice feature to add more control to the users/board admins to handle this in the future. Also, I would be surprised if this would be a legal issue anywhere in the world as users whether users share this information is up to them (the only required contact information is the email address which is never exposed to anyone).

Anyway, this won't be added before 3.3 for sure.

User avatar
Scanialady
Registered User
Posts: 13
Joined: Sat Sep 12, 2015 3:17 pm

Re: Possible Bug - guests can view contact data in profile

Post by Scanialady » Thu Mar 17, 2016 9:49 pm

I would be pleased if more control for guest permissions would be added in the future :)
In my personal view phpBB is a little bit too talkative

User avatar
3Di
Registered User
Posts: 694
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano (I) Frankfurt (D)
Contact:

Re: Possible Bug - guests can view contact data in profile

Post by 3Di » Fri Mar 18, 2016 2:58 am

Scanialady wrote:
Thu Mar 17, 2016 9:49 pm
I would be pleased if more control for guest permissions would be added in the future :)
In my personal view phpBB is a little bit too talkative
Why not to open a feature request?
Notice that are allowed just for the 3.3.x serie though.
https://tracker.phpbb.com/
Want to compensate me for my interest? Don't ask me, just do it
I'm available for custom phpBB jobs, you can PM me the details.
New: my Live Board, Extensions and Tools for phpBB - Men at works.

Post Reply