1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.1 Users reporting message in Personal Conversation and privacy

Discussion in 'XenForo Questions and Support' started by Francesco V., Apr 8, 2013.

  1. Francesco V.

    Francesco V. Active Member


    i have just found that messages in Personal Conversation (a kind of vBulletin private messages) are "reportable" by users. This means that global moderator receive a notification and are then able to see the (private? Personal?) message.
    There's a way to avoid it.
    There are 2 problem with this:

    - Nobody, neither the Admin, must see a personal message. Ok, data are stored in clear in database, but i'm referring to forum application

    - Forum administration must not be involved in personal/private disputes so personal messages in personal conversations must not be reportable.

    There's a way to accomplish this 2 points ?

    Thanks a lot
  2. Nasr

    Nasr Well-Known Member

    You can remove the report link from the private conversation templates
    Francesco V. likes this.
  3. Francesco V.

    Francesco V. Active Member

    Yep you're right, i was hoping there was some core setup i missed before tweak template.

    Thanks a lot

    EDIT: the matter is that a user that knows how to build the report link url can anyway report that message and pop it in front of a 3rd party (mod or admin ) :(
  4. Nasr

    Nasr Well-Known Member

    It will be a little difficult for them to do that. Otherwise, you'd have to get an addon made for this.
  5. Morgain

    Morgain Well-Known Member

    It's easy If you need to check a PC you can just change the password and login as them.
    There's also an addon Login As User so you dont need to bother with passwords.
    On some boards there are issues of protecting vulnerable users so this is a necessary power.

    But if you cant trust your admins then yes comment out the report link on the PC template.
  6. Francesco V.

    Francesco V. Active Member

    Well, i know that PC data are stored in clear in database so they are not actually secret. What i wish is only to turn off reporting feature in personal conversation. For turn off i mean turn off the link effectiveness.
  7. Francesco V.

    Francesco V. Active Member

    well after all the report link is:

    $PrivConvURL + "/report?message_id=" + $Message_id

    To know the Message_id you need only to click reply on it and it appears in the quote stuff.

    User can discover this by looking at report link in PrivConv in other xenforo Board or making an educated guess from forum message report link
  8. borbole

    borbole Well-Known Member

    You will need a mod to make the pc report group based permission or to disable the pc report function completely.

    What about in cases of illegal activities or spam and the likes. Wouldn''t you like to know if such action takes place at your forum?
  9. Syndol

    Syndol Guest

    To disable the reporting of conversation messages, open file XenForo/Model/Conversation.php
    Replace line 1243 in function canReportMessage() with
    return false;
    Brogan, Francesco V. and Chris D like this.

Share This Page