administrative view of profile email address

Have A Bug With Your Webdate Script. Ask For Help Here.

administrative view of profile email address

Postby mutton on Mon Apr 07, 2008 4:39 pm

In the administrative view everyone's email address is displayed as zzt3en

I would add to this view a count of how many members have the same IP address. If it's an AOL address or something it will be a lot. But if it's a cable or DSL provider it should just be one.
mutton
 
Posts: 100
Joined: Mon Feb 11, 2008 11:47 pm

Re: administrative view of profile email address

Postby paul on Mon Apr 07, 2008 6:47 pm

Mutton,

Keep in mind that this code was modified because of a security issue anyone can see your members emails if they know how to work the system

I prefer the email do not display in the preview profile view because you can always see them when clicking edit a member anyway.

this code was changed to protect members emails.

if you want to change it back do the following:

open:

engine/pages/preview_profile.php

find near line 147

Code: Select all
<td width="40%"><strong>Email:zzt3en</strong></td>
                              <!--<td width="60%">'.$aMember["email"].'</td>-->


Erase these lines and replace with the following:

Code: Select all
<td width="40%"><strong>Email:</strong></td>
                              <td width="60%">'.$aMember["email"].'</td>


If you want to keep your members emails secure I recommend you leave this the way it is...

Paul
User avatar
paul
Site Admin
 
Posts: 264
Joined: Sat Jan 26, 2008 7:30 pm
Location: Newington,Ct,USA

Re: administrative view of profile email address

Postby mutton on Tue Apr 08, 2008 10:34 pm

Why is it less secure, since someone who got into smartway could view any member they wanted anyhow?

How do you feel about displaying the number of users with the same IP address? I think it helps prevent abuse.
mutton
 
Posts: 100
Joined: Mon Feb 11, 2008 11:47 pm

Re: administrative view of profile email address

Postby paul on Wed Apr 09, 2008 7:22 am

the page can be viewed without logging in to smartway but thats all I am going to say.

as far as the IP thing it would be easier to right a small script to check the database for matching IPS

If I have time later today I will write this IP match checker for you

Paul
User avatar
paul
Site Admin
 
Posts: 264
Joined: Sat Jan 26, 2008 7:30 pm
Location: Newington,Ct,USA

Re: administrative view of profile email address

Postby mutton on Wed Apr 09, 2008 8:22 am

Here's what I had in v2 to show me the number of times an email was used:

$p333 = f(q("SELECT * FROM dt_members WHERE login='$fMember[login]'"));

$p334 = f(q("SELECT COUNT(ip_addr) AS ip_count FROM dt_members WHERE ip_addr = '$p333[ip_addr]'"));

echo $p334[ip_count];
mutton
 
Posts: 100
Joined: Mon Feb 11, 2008 11:47 pm


Return to Have A Bug? Ask For Help Here

Who is online

Users browsing this forum: No registered users and 5 guests

cron