1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Hidden Users

Discussion in 'Troubleshooting and Problems' started by Rich, Aug 31, 2011.

  1. Rich

    Rich Active Member

    Can someone please help me, I want to remove the ability to hide yourself on my boards when your signed in.

  2. James

    James Well-Known Member

    I just looked through permissions and apparently it's not a permission (or am I just blind?). You'll just have to write an add-on to prevent it or remove all links to it in templates.
  3. Rich

    Rich Active Member

    Should be a permission in the core.
  4. James

    James Well-Known Member

    I agree.
  5. Rich

    Rich Active Member

    does anyone know how to write the code to keep the box clicked for all users , or Remove it?!
  6. James

    James Well-Known Member

    Remove the code from navigation_visitor_tab and from the account settings menu, if it exists.
  7. Rich

    Rich Active Member

    I cant seem to get it right.
  8. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

  9. CyclingTribe

    CyclingTribe Well-Known Member

  10. ragtek

    ragtek Guest

    That's not enough!

    For avarage joe it's fine, but "smart users" will still be able to send a post request and set them invisible..

    The admin could see that they're invisible, but he wouldn't know why and then the really expensive part starts => checking how they where able to do this..:D

    That's why you SHOULD ALWAYS prevent this on server side too!
    Never remove / comment out the form fields and think "it's done" ;)
  11. James

    James Well-Known Member

    Yes, I know. Removing the links is enough generally, as most people won't know the URL to send the post request to.
  12. Saeed

    Saeed Well-Known Member

    That is sort of what happened. I used the code changes Jake has suggested above, along with conditionals that would allow only Mods and Admins to view the control, but a member has managed to bypass it somehow. Is there any way to disable this from the server side or this would need to be developed as an addon? :)

Share This Page