Anspress Users page

Question

Anspress Users page

5.41K viewsDecember 4, 2014Core

1

Cagliostro 4.19K Posted December 2, 2014

Just added a Users page for Anspress. I see that ALL users are revealed. Admins ids also.

Can that be changed ?

thanks

3 Answers

score 1 · Answer 1 · 2014-12-04T10:35:05+00:00

1

Rahul Aryan 30.96K Posted December 4, 2014 1 Comment

So just excluding admin from this list will be okey ?

Cagliostro commented December 4, 2014

It is a start …. 🙂

score 0 · Answer 2 · 2014-12-03T19:33:11+00:00

0

chad_fullerton Posted December 3, 2014 1 Comment

I can see how it can be a security issue showing all ID’s of admin accounts. Good suggestion Cagliostro.

Cagliostro commented December 3, 2014

Sure. For now i have renamed the “users.php” in the template folder to some other strange name. So people that point to /users get an empty page. Not sure if this creates some other problem but i do not want to reveal all that sensitive information publicly.

score 1 · Answer 3 · 2014-12-03T10:28:44+00:00

1

Rahul Aryan 30.96K Posted December 3, 2014 2 Comments

Not this moment, but we will add an option to disable users page.

Cagliostro commented December 3, 2014

What you should do is exclude admins from the users listings. Or at least the main site admin.

Fred - FLQ commented December 4, 2014

+1 for the ability to remove admin from any users listings (widget generated ones also). Users page is great otherwise. 😀

3 Answers

Resources