John Quail
Forum Replies Created
-
It’s a huge security vulnerability because, for example, I can type common surnames and the website will list for me all the users that have that surname, even if that information is hidden on the public profiles.
There is no social network nor online forum that allows people to publicly search for private or confidential information that is hidden from the profiles. It’s not only a security issue but it could also lead to lawsuits for poor management of private information. Please solve ASAP.
So this is how the plugin is supposed to work? It seems like a big security issue. Search by email and other private info should be restricted to the admin panel.
@andrewshu Thank you. I’ve also noticed that in the country dropdown in Spanish, the countries names are not in alphabetical order. So, “España” doesn’t show up in the “E” but among the countries that begin with “S”, because the name in English is “Spain”. I’d be very grateful if you could fix that too.
In most cases, and for the sake of simplicity, the common name of a country (and not the ISO one) should be used. In most cases, the common name is better recognized or simply easier to fit or find than the official country name.
The official name of the United Kingdom according to ISO is “United Kingdom of Great Britain and Norther Ireland” but no one uses that because it’s long and unnecessary and no one calls the country that. Same applies to Venezuela.
Some more examples just in case: You have “China” in the plugin, you don’t have “People’s Republic of China”. You have “Iran”, you don’t have “Islamic Republic of Iran”. You have “India”, you don’t have “Republic of India”. You have “Australia”, you don’t have “Commonwealth of Australia”. I hope this will suffice.
The issue is that the official name should not be used, because you’re not using the official name for any other country. For example, you’re using “United Kingdom” and not “United Kingdom of Great Britain and Northern Ireland”. You’re using Bolivia, and not “Plurinational State of Bolivia”. You’re using Chile and not “Republic of Chile”. You’re using “Argentina” and not “Argentine Republic”. Should I go on?
Official names are rarely used. They’re not used in maps or the news… or web forms and plugins.
It seems it can also be searched by email. For example, by typing “yahoo”, I get a search result showing all the users that signed up using yahoo email addresses.
I’ll do, but it seems the second issue I mentioned relates to the plugin, not the extension. The name of the country Venezuela is wrong.
You’re right, sorry for the misunderstanding
It seems the problem is because the plugin created a new profile nav bar instead of using the one that already exists. Screenshot:
Nevermind, I’ve found where to set the plugin to Advanced mode. It seems the Advanced mode was deactivated when updating the plugin.
Forum: Themes and Templates
In reply to: [Astra] Account menu not working on mobileI’ve contacted Astra pro support and they informed me it’s normal:
It's a design decision, and you can't show the account menu on the mobile or any other responsive device. And it is already mentioned in the Astra customizer settings. On responsive devices, the menu will be replaced with the link that you add in the like tab of the settings.Thanks!
Forum: Themes and Templates
In reply to: [Astra] Tablet and mobile menus don’t workIn the header builder, check the icons at the bottom of the page. There are 3: desktop, tablet and mobile. When clicking on them you can set up the headers for each
Forum: Themes and Templates
In reply to: [Astra] Tablet and mobile menus don’t workHave you tried setting up the mobile menus in the header builder? They have to be set up separately.