12
As well as clicking a user name to view their profile, savvy XOOPS users can also enter:
http://www.example.com/userinfo.php?uid=2and see the profile for the user whose id is '2'.
To prevent anon users seeing profiles:
Open 'userinfo.php' and find:
$xoopsOption['pagetype'] = 'user';
include 'mainfile.php';
include_once XOOPS_ROOT_PATH.'/class/module.textsanitizer.php';
Then add this line below it:
$xoopsUser or redirect_header('index.php', 3, _NOPERM);
Out of interest, did Vaughan's email hack work?
A thread is for life. Not just for Christmas.