#1 WordPress forum plugin created by gVectors Team

wpForo – WordPress Forum Plugin
  • Home
  • Forum
  • Migrate to wpForo
  • Addons
  • Addons Demo
  • Documentation

Forum

Home | Forum

wpDiscuz - WordPress Comment Plugin
  • Forums
  • Members
  • Recent Posts
Forums
Main Support Forums
How-to and Troubles...
User Nicenames Priv...
 
Share:
Share
Tweet
Share
Notifications
Clear all

[Solved] User Nicenames Privacy Hole

    Last Post
RSS

jcardona
Posts: 14
 jcardona
Topic starter
June 12, 2019 9:06 pm
(@jcardona)
Active Member
Joined: 3 years ago

Pardon me if this a setting that I'm just not seeing... but is there a way to change what gets picked as someone's nicename? Right now it looks like it selects someone's email address which is a HUGE privacy concern for me. I know we can hide nicenames but then that makes it hard for someone to mention someone in a reply and have them get a notification.

This topic was modified 3 years ago by jcardona
Topic Tags
nicknames nicenames nickname nicename
4 Replies
Sofy
Posts: 4057
Sofy - Facebook Sofy - Twitter
 Sofy
Admin
June 13, 2019 1:01 pm
(@sofy)
Support Team
Joined: 4 years ago

Hi @jcardona,

WordPress and wpForo have three different names for Users:

  • Username (Login) – Being used for forum authorization (login, sign-in) action
  • Display Name – Other users and guests see in user profile details and next to user posts (post author name).
  • Nicename – Unique name which is used in WordPress and wpForo core to generate user Profile URL. In other words, this is the user slug. For example example.com/community/profile/martin59/.

After a regular user registration process, Username, Display Name and Nicename are set the same. For example If you register a user with “Martin59” Username your user names look like this:

  • Username – Martin59
  • Display Name – Martin59
  • Nicename – martin59

And profile URL will be example.com/community/profile/martin59/

The wpForo has “Display Name” and “Nicename” fields in Forum > My Profile > Account front-end page. Using these options you should change the Display Name and  Nicename to something like this:

  • Username – Martin59
  • Display Name – Martin P.
  • Nicename – martinos

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

Robert
Posts: 8968
Robert - Twitter
 Robert
Admin
April 19, 2020 1:28 pm
(@robert)
Support Team
Joined: 6 years ago

Also, please read this support topic: https://wpforo.com/community/how-to-and-troubleshooting-2/how-to-close-username/#post-38917

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

RichardHKG
Posts: 23
 RichardHKG
April 19, 2020 2:43 pm
(@richardhkg)
Eminent Member
Joined: 2 years ago

1. @sofy @robert  I too have a major concern with this topic. Yes, I have read all the docs, and my wp_users database has different username, nickname, and display_name.

BUT wpForo does not use the Display Name as you claim. It uses the very insecure nickname. And like @jcardona I see no way to change this. As @jcardona says, a very BIG privacy/security hole!

Can you please review what you have noted and clarify. As the wpForo sync process has added 6,000 members it is not practical to ask all 6,000 to go to their profiles to make changes. So how do I set Display Name as claimed??

2. Ref Profiles, we have disabled access to profiles and admin bars for security on main site, so would like to do same for wpForo profile. Can this be done?

Thanks for your time.

PS. I have new forum live but hidden, as not able to develop wpForo offline so another security hassle to consider. BUT despite no menu access have already seen bots hacking into wpForo profiles in my security audit log within hours!!!! 🙁

This post was modified 2 years ago 2 times by RichardHKG
Robert
Posts: 8968
Robert - Twitter
 Robert
Admin
April 19, 2020 3:23 pm
(@robert)
Support Team
Joined: 6 years ago

@richardhkg,

wpForo does use Display Names and yes it does use Nickname as well.

 

1. You can disable nickname very easy. But you should know that there is no way to hack profile using nickname if you have changed it and it doesn't match to your username. The nickname is nothing! It's not username so it has no any value in security. Again, in case if it doesn't match to username.

 

2. Do you know that all WordPress plugins (e.g. BuddyPress) and even the WordPress use Nicknames in user profile URLs? So, please let me know if this is a security issue why thousands of plugins and the WordPress use the nickname in public places, in the user @mentioning and in User URLs? If you click on Article Author link on a regular WordPress article you'll go to WordPress user page. Just take a look on the URL, it consists of your nickname. So the nickname is already public, even disabling wpForo will not help you make nicknames private (unless you use custom solutions).

 

3. In any case, if you still want to disable nicknames in wpForo you should put this code in WordPress active theme functions.php file:

function wpforo_disable_user_nicenames( $nicename ){
return '';
}
add_filter('wpforo_member_nicename', 'wpforo_disable_user_nicenames', 10);

How to Easily Add Custom Code in WordPress (without Breaking Your Site)

 

 

 

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

RichardHKG liked
  All forum topics
  Previous Topic
Next Topic  
Related Topics
  • How to hide the Username in user posts
    2 months ago
  • Tagging with username in forum is not giving notification at bell icon
    4 months ago
  • Display Name Issue
    5 months ago
  • Forum no longer tagging my ultimate members.
    6 months ago
  • Reply button automatically adds post author @nickname in editor
    7 months ago
Topic Tags:  nicknames (7), nicenames (5), nickname (13), nicename (6),

Forum Search

Join Us!

Download wpForo plugin
on WordPress.org

wpForo Addons

wpforo-private-messages wpforo-advanced-attachments-128x128 wpforo-embeds-128x128 wpForo User Custom Fields addon wpForo – Blog Cross Posting addon wpForo Ads Manager wpForo – WooCommerce Memberships Integration wpForo Emoticons wpForo – Tenor GIFs Integration
View all Addons »

Recent Topics

  • Menu location

    By Vijiki, 6 hours ago

  • Setting recent topics on forum frontend

    By Vijiki, 14 hours ago

  • Draft draft users post on wpforo

    By Vijiki, 15 hours ago

  • How to remove content from email notification

    By Vijiki, 16 hours ago

  • How to prevent forum users from PASTING / posting multiple colors and font sizes...??

    By Noved, 2 days ago

  • purchase of add on and it says payment pending

    By ReddBeard, 3 days ago

Topic Tags

  • translation49
  • css49
  • plugin conflict48
  • seo45
  • new features44
  • buddypress42
  • ultimate member40
  • avatar40
  • forum40
  • moderation38
  • login38
  • registration36
  • threaded layout35
  • cache33
  • editor32
  • menu32
  • shortcode31
  • spam29
  • phrases28
  • forum accesses28
View all tags (2163)

Recent Posts

  • Menu location

    I will like to change the menu drop-down position/behav...

    By Vijiki, 6 hours ago

  • RE: Setting recent topics on forum frontend

    ok, now you explained better what you want to do. It ca...

    By dimalifragis, 8 hours ago

  • Problem with private forum

    Hi, i've one problem with my private forum. I want the ...

    By Darkkang, 15 hours ago

  • Draft draft users post on wpforo

    Hello How can I draft users post on wpforo (like a te...

    By Vijiki, 15 hours ago

  • RE: How to remove content from email notification

    Edit the body of the emails, in wpForo settings / email...

    By dimalifragis, 16 hours ago

  • RE: Show Likers with their avatar

    Have now found the correct code 😀 are these 3 lines ...

    By Tutrix, 2 days ago

  • RE: How to prevent forum users from PASTING / posting multiple colors and font sizes...??

    @noved add this to custom css #wpforo #wpforo-wrap ...

    By Tutrix, 2 days ago

Share:
Share
Tweet
Share
  Forum Statistics
20 Forums
9,763 Topics
49.5 K Posts
11 Online
43.8 K Members

Latest Post: Menu location Our newest member: goaloosports Recent Posts Unread Posts Tags

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Powered by wpForo | Copyright © 2016-2022 gVectors Team
Copyright Registration Service - Click here for more information or to register work
wpForo is Registered with the IP Rights Office
Copyright Registration Service

Ref: 4477265538
  • Home
  • Forum
  • Migrate to wpForo
  • Addons
  • Addons Demo
  • Documentation