I had a freaked-out email from a forum member today complaining that ISP addresses are visible to anyone logged into the forum. Here’s her description of what she sees (she has full access as a Senior Member):

I discovered this evening that personal information is being given out on the board, by way of a feature that is not locked down.  It is giving out our IP addresses and our email addresses.  To see what I mean, this is what you do.  Go into a post and go see the profile of one of the members.  In the profile box, up at the top and to the left, put your mouse over there.  It’s up at the top near the date.  You will see a ‘tool’ icon appear.  Click on the icon and another box will appear.  In that box, you can click on the ’email and IP’ address and watch what appears?  I double checked on the email address I know mine is private and I know another members is private, but it’s showing up in this window.  With the IP addresses, I have lots of fear of that being hacked!  Is there a way to get this feature locked down/shut off immediately?  I know Jennie feels the board is pretty safe, but still, this kind of information should not be accessible to anyone, except moderators/Jennie!

This is a pretty serious security breach, as hackers can use ISPs and email addresses to get into personal information on computers that aren’t protected by a firewall. How do I turn off the ISP feature to all but admins? I’ve already turned off the “can view email addresses” in the Full Access permission set.

Thanks,

Jennie