leaks WP user’s infos, privacy

Update:

since 2.8.31 point (1) seems addressed. (2) perhaps calls for some WP hooks to handle privacy & such settings across plugins – dunno if such thing already exists – till then admins need to tinker around a bit, likely not a GT issue.
Fair enough, let’s leave 1 star for improvements (wonder if people consider the semantic attached to the stars …)

thanx a lot

=======

Hi

I’d rate 4 stars, except for few things:

1) main one: it grabs current WP user infos to (connect to) an external service (chat hub):

        <?php $user_info = wp_get_current_user(); ?>
        <script>window.intercomSettings = {app_id: "r70azrgx", 'email': '<?php echo addslashes($user_info->user_email); ?>', 'name': '<?php echo addslashes($user_info->first_name . ' ' . $user_info->last_name); ?>',
...

now, it’s good you provide in-widget-admin direct link to support – like for the teasers / pages on yt / soc-nets – but you’re not supposed to leak anything by exploting the priviledge access the plugin is granted by installation. So whatever service you suggest the user to connect to, do it clean & let user fill in the details (even an option to ‘use my WP-userinfos’)

2) since the translation is handled client side, site visitor should be informed it’s via gtranslate (‘powered by …’), so at least it’s warned that its navigation is tracked by bigG regardless of other choices (e.g. cookies) for that site

3) marginal issue (I know it should go to support ticket …), on AP-lite theme at least, the option to have the switcher on primary menu puts the control on top right outside the screen, no it’s not visible unless the window is larger enough than the max width of the page. Perhaps that’s a feature rather than a bug, to avoid overlap with theme’s menu … ?

thx

• This topic was modified 6 years, 6 months ago by b-smark. Reason: main issue was addressed