XF 2.3 Fetching User Data

[QuackieMackie]

This might be a silly question but I'm working on a staff help page. I wanted to load member information dynamically.
So I wrote a quick method that fetches admins, and moderators. But when I see what data is fetched using Xdebug I can see emails, secret keys, etc.

Is this something I should be worried about? I feel like it is as if I can access it, whats stopping other people?

public static function renderStaffList(AbstractController $controller, \XF\Mvc\Reply\View $view)
{
    $finder = \XF::app()->finder('XF:User');

    $finder->with('Profile');

    $adminFinder = clone $finder;
    $adminUsers = $adminFinder
        ->where('is_admin', true)
        ->where('user_state', 'valid')
        ->order('username')
        ->fetch();

    $modFinder = clone $finder;
    $modUsers = $modFinder
        ->where('is_moderator', true)
        ->where('is_admin', false)
        ->where('user_state', 'valid')
        ->order('username')
        ->fetch();

    $view->setParam('adminUsers', $adminUsers);
    $view->setParam('modUsers', $modUsers);
}

 

[Paul B]

Do other people have access to the server to upload code to do so?

 

[QuackieMackie]

Do other people have access to the server to upload code to do so?

No this is currently in a test enviroment and when I eventually move it to a live server it won't be accessiable for other people.