Stopping profile views from quests

Posted: Thu Dec 06, 2012 4:08 am

How could I go about restricting profile viewing of registered users for guests?

Currently when I am logged out of my admin account and registered user account and go to these both, I am able to view any registered users profile as a guest.

/modules.php?name=Forums&file=profile&mode=viewprofile&u=USER#
/modules.php?name=Your_Account&op=userinfo&username=USERNAME

Site Admin Joined: Aug 22, 2007 Posts: 1772

To hide the userinfo pages, you can try this:

Open modules/your_Account/public/userinfo.php

find:

Code:

if (!isset($bypass)) $bypass = '';

after add:

Code:

if (is_user($user) || is_admin($admin)) {

find:

Code:

include_once 'footer.php';

after add:

Code:

} else {


   Header('Location: ./');


   exit();


}

To hide the forum profile pages, you can try this:

Open modules/Forums/includes/usercp_viewprofile.php

find:

Code:

if ( !defined('IN_PHPBB') )


{


   die("Hacking attempt");


   exit;


}

after add:

Code:

if (is_user($user) || is_admin($admin)) {

find:

Code:

include("modules/Forums/includes/page_tail.php");

after add:

Code:

} else {


   Header('Location: ./');


   exit();


}

Posted: Thu Dec 06, 2012 3:50 pm

Awesome that works, now I noticed that the code redirects the user back to the index.

Now what could I use to just keep the guest on the same page and give them a notification that they need to be registered before trying to view someones profile?

Posted: Thu Dec 06, 2012 4:26 pm

Open your modified modules/your_Account/public/userinfo.php

find:

Code:

} else {


   Header('Location: ./');


   exit();


}

replace it with:

Code:

} else {


   include_once 'header.php';


   OpenTable();


   echo '<div class="text-center">[ <a href="javascript:history.go(-1)">Go back</a> ]</div>';


   CloseTable();


   include_once 'footer.php';


}

Open your modified modules/Forums/includes/usercp_viewprofile.php

find:

Code:

} else {


   Header('Location: ./');


   exit();


}

replace it with:

Code:

} else {


   echo '<div class="text-center">[ <a href="javascript:history.go(-1)">Go back</a> ]</div>';


   // Note: In my theme i must remove the closing div to get a valid result. Check this with your theme!


   include("modules/Forums/includes/page_tail.php");


}

Posted: Thu Dec 06, 2012 4:40 pm

This is now what I get when I view someones profile via Your Account as guest, this looks great and is just how I wanted it.

But when I view someones profile via Forums as guest, this is what I get and I think this is what your talking about with having to comment out the </div> in your themes?

I would like this one to have that same table and looks as when viewing profile via Your Account.

Posted: Thu Dec 06, 2012 4:58 pm

I just wanted to clarify the way for the function. You can determine self the description of the link. You can use a existing language constant or you create a new one in the language files. With the closing div i have meaned a validation error. I'm using only self written themes and I got the validation error in my own themes in the forum profile view. If you have added the new lines, please check it with a validator and/or replace it with your own code/styles.