That is an html question.Since my javascript knowledge is practically zero, I need to make this suggestion:
View attachment 37246
<h3><a href='{xen:link '{$taigachat.route}'}'>{xen:phrase dark_members_in_chat}</a></h3>
<h3><a href='{xen:link '{$taigachat.route}'}'>{xen:phrase dark_members_in_chat}</a> ({xen:number $taigachat.online.total})</h3>
<div class="footnote">
{xen:phrase dark_in_chat_x, 'total={xen:number $taigachat.online.total}'}
</div>
That is an html question.
I didn't test this but it should be:
Template: dark_taigachat_online_users
Change
ToHTML:<h3><a href='{xen:link '{$taigachat.route}'}'>{xen:phrase dark_members_in_chat}</a></h3>
HTML:<h3><a href='{xen:link '{$taigachat.route}'}'>{xen:phrase dark_members_in_chat}</a> ({xen:number $taigachat.online.total})</h3>
And comment out/remove
HTML:<div class="footnote"> {xen:phrase dark_in_chat_x, 'total={xen:number $taigachat.online.total}'} </div>
<div id='taigachat_online_users_holder'></div>
<xen:if is="!{$taigachat.canView}">
<xen:else />
<xen:sidebar>
<xen:edithint template="sidebar.css" />
<xen:include template="sidebar_online_users">
<xen:map from="$taigachat.onlineUsers" to="$onlineUsers" />
</xen:include>
<div id='taigachat_online_users_holder'></div>
</xen:sidebar>
</xen:if>
I do not understand why it needs to be named messages.html, it's not possible to use another format, like .php so that you could hide the content from being viewed?How to fix this issue? I can Google data/taigachat/messages.html
and read everybody's shoutbox message on any site no matter the permissions.
Huge, huge problem!!!
From what I understand that's how the Speed Mode option works. Luke even said that if you have sensitive information in the chat, don't enable this option.How to fix this issue? I can Google data/taigachat/messages.html
and read everybody's shoutbox message on any site no matter the permissions.
Huge, huge problem!!!
From what I understand that's how the Speed Mode option works. Luke even said that if you have sensitive information in the chat, don't enable this option.
Well "know what they are doing" is quite generic and would usually mean they have some knowledge, but in this case the page is even crawled by spiders, are we sure there is no way to not make the page so easily accessible? I suppose people can live without speed mode, but maybe something can be done to make it more secure.(Note that this system makes it possible for users who know what they are doing to view (not post) shoutbox messages regardless of permissions - be sure to disable it if you plan on posting private data in shoutbox messages. For the vast majority of uses (even as a members-only or VIP chat), this is not an issue and it can be safely enabled.)
@oman, do you have speed mode disabled or enabled on your site? I'm curious because I can see yours by adding /data/taigachat/messages.html or messagesmini.html
I have it disabled, because I don't need speed mode as of yet.
All the messages in his messages.html are dated 20th november, i guess he had it enabled at some point.If you have speed mode disabled, then why can I see your shoutbox by viewing messages.html on your site? The mod states with it Enabled the messages are viewable.
If you have speed mode disabled, then why can I see your shoutbox by viewing messages.html on your site? The mod states with it Enabled the messages are viewable.
I don't use this addon, but i guess you could try use some rewrite rules.good news! there must be a way to keep those files private though for people with speed mode on. or an option to clear it every so often. I don't think pruning the shoutbox clears those files.
We use essential cookies to make this site work, and optional cookies to enhance your experience.