Code Monkey
Well-known member
If it's registered members only then XenForo and other mods do a awesome job keeping them out. I don't think it's a problem if it's not open to guests. And if it's not open to guests then you only need the user id anyway. You can just use XF functions to grab the rest.
FYI the xf_user table has email set at varchar(120)
FYI the xf_user table has email set at varchar(120)