Digital Point Search

Digital Point Search [Paid] 2.0.0

No permission to buy ($150.00)
Overview Updates (7) Reviews (3) History Discussion
Anyone know if I misinterpreted how to use DPs example? I have a new member setting off all the alarms that I really need to scrutinize.
 
It basically comes down to the default Elastic Search is set to keep 2 copies of data on different servers. So if you have one server it has no place to put the redundant data.

As far as updating the stats block for ES 1.0, will see about updating my ES cluster this weekend so I can do that.
 
RoldanLT said:
ElasticSearch Statistics on Admin Page doesn't work anymore with ES 1.0.0 ?
View attachment 67247
Click to expand...
New version should fix it as well as add a few extra stats to the block...

es_stats-png.67443
 
  • Like
Reactions: rdn
Yes, there seems to be no way to download it, so if you need updates later, another $25 have to be paid... it doesn't show up in my licensed items.
 
I just updated to Digital Point Search 1.10. and it's not listing any of my notes.
ElasticSearch_Stats.webp

Here are my results to running a CURL command to list the nodes (I think)


elasticsearch_curl_results.webp

Am I doing something wrong?
 
I love the fact that mods can search reports, and users can search conversations, and users can search eachother's custom profile fields. However, I have a big problem with all users being able to search other member's email addresses. If I enter a partial email of a user, I can find their forum account. If a user has an email joetest45@gmail.com, and someone from work knew it, and wanted to find their forum account all they have to search for is joetest45. Isn't this a big security risk? Am I missing something?
 
It intentionally works that way... It's pretty common practice that if you know someone's email, you can find their account for something based on that email.

For example, if you search an email in Facebook, it shows you the account.
 
digitalpoint said:
It intentionally works that way... It's pretty common practice that if you know someone's email, you can find their account for something based on that email.

For example, if you search an email in Facebook, it shows you the account.
Click to expand...

Yes, but facebook has a permission for this, it's defaultly allowed, but there should be a privacy option if this is a feature.
 
digitalpoint said:
It intentionally works that way... It's pretty common practice that if you know someone's email, you can find their account for something based on that email.

For example, if you search an email in Facebook, it shows you the account.
Click to expand...

I think if you put an email on your public facebook profile, you are expecting that people can find you that way. Unless of course you change your settings under "Who can look me up?". Not so on our forums - nowhere do we say that your email will be available for friends to find you, and also there's no option to not allow people to find you this way. Also, on Facebook, you can hide all of your profile posts etc. from non-friends. On our forums, once you find someone's account, you can access all of their posts no matter what.

I just see bad scenarios for this, especially in a work environment. We have a lot of users browsing TalkBass at work. If a malicious co-worker can jump on and find Bob's forum username, and see his entire post history (Bob's got no way to hide it), co-worker Jim can get him into big trouble for posting during work hours. Just one scenario.

I simple toggle to not allow searches based on emails would be wonderful ;) Until then I have to disable this addon based on privacy concerns.
 
Last edited:
You must log in or register to reply here.

Similar threads

4
  • Question Question
XF 2.0 Xenforo Enhanced Search vs Digital Point Search
Replies
0
Views
395
420
4
RAHSTYLES
  • Locked
Paid help me put g adsense with Digital Point Ad Positioning
Replies
3
Views
1K
Paul B
P
Back
Top Bottom