Hireko Forum
  Search   Recent Topics  Back to home page 
Register / 
Login 
Security problem  
Forum Index -> Suggestions & Feedback
Author Message
dtutelman


Joined: Oct 7, 2006
Messages: 5
Offline

You have a couple of problems with the forum that endanger my security.

(1) You use email address as the login name. It hadn't occurred to me until recently, but that exposes my email address to the public. On my own web site, I go to some lengths NOT to expose my email address; it is a spam magnet. But you expose it, because that is the NAME by which I am known in the forum. It is the title of my profile, and is the name with which my posts are signed.

(1a) In the profile, there is a choice, "Show my email address." I picked "no". But this cannot be enforced if the NAME IS THE EMAIL ADDRESS. Ouch! I thought this protected me, but it doesn't. I found out when I did a network search on my name and, much to my surprise, found it picked up my email address on the first page of search results -- in your forum. Not what I intended at all.

(2) I was unable to find a way to unsubscribe from the forum. I do not want my email address exposed like that. Please remove me from the forum. When you decide to go back to names really being names and not email addresses, I'll consider returning to the forum.

Thank you,
Dave Tutelman
Jeff Summitt


Joined: Jan 13, 2006
Messages: 2240
Offline

Dave:

I changed it to your name only. You (or anybody) should be able to go to My Profile once logged in, then under User, put the name you want to show up.

If anybody else has a problem, please email at jsummitt@hirekogolf.com and we will take care of it.

Jeff Summitt
dtutelman


Joined: Oct 7, 2006
Messages: 5
Offline

Jeff Summitt wrote:
Dave:
I changed it to your name only. You (or anybody) should be able to go to My Profile once logged in, then under User, put the name you want to show up.
 

Thanks, Jeff, but I don't think it's that easy. I tried it, and "User" cannot be changed in the Profile screen. I'm an administrator for another forum (it's built on phpBB, not jforum as your is), and the same thing is true:
* I cannot change my username from Profile.
* If I log in as the administrator, I can change anybody's username.

BTW, on my phpBB-based forum, there are separate, independent fields for UserName (e.g., dtutelman), DisplayName (e.g., Dave Tutelman), and EmailAddress.

Bottom line: We have to depend on you (or another administrator) to fix this for us; we can't do it ourselves.

Given that, may I request you change my username to "dtutelman". The current username spells my last name wrong, and I probably won't remember it anyway. I use "dtutelman" as my username on any site that doesn't require an email address for login. And no other site that requires email address for login uses it as a display name for all to see -- which is what motivated this thread in the first place.

Thanks,
DaveT
GaryJ



Joined: Feb 3, 2006
Messages: 94
Offline

Jeff: I logged in and saw the user name, but unable to to change it. How is it done?

Gary
Condor Golf
Jeff Summitt


Joined: Jan 13, 2006
Messages: 2240
Offline

Thanks Dave for letting me aware of the issue. I changed your user name as you asked.

Jeff Summitt
dtutelman


Joined: Oct 7, 2006
Messages: 5
Offline

Jeff Summitt wrote:
Thanks Dave for letting me aware of the issue. I changed your user name as you asked. 

Perfect!
Thanks,
DaveT
rfreenktown@yahoo.com



Joined: Sep 21, 2008
Messages: 10
Offline

Are there steps being taken to allow those of us who don't want our email address shown to change it in our profile???????
Jeff Summitt


Joined: Jan 13, 2006
Messages: 2240
Offline

Yes, but in the meantime PM me with the User Name you would like to have on the site.

Jeff Summitt
 
  Forum Index -> Suggestions & Feedback
Go to:   
Powered by JForum 2.1.4 © 2005 - Rafael Steil