Support Forum

@Mention plugin question regarding email security

CS Carlos Bravo Sanchez
Carlos Bravo Sanchez
Member

Dear Simple:Press team,

We were wondering if you could provide us with help to modify the mentions plugin slightly. Our users sign up using an email address and then their first/last name is used on our membership site and the forum.

This creates a slight issue as when we installed the mentions plugin, the email address appeared in parenthesis after the name in the dropdown autocomplete list (data protection issue). So something like this appeared: @alex (alex gmail.com) or similar.

We assume this is because the mention plugin displays the usernames (which in our case are email addresses) as well as forum or alternate names.

Is there anything we can do to not display these email addresses with the plugin and just display the screen/member names?

Thanks in advance!

 

6 Answers

New Answer

YS Yellow Swordfish
Yellow Swordfish
Member

Mr Papa will no doubt correct me if I am mistaken (he wrote the plugin) but I think you will find it does not use the login name to populate the list but actually uses what WordPress call the ‘nice name’. The reason for this is that it requires a user identifier with no spaces and the display name can of course – just like mine and yours –  include spaces.

Whether that can be changed I will need Steve to comment on and he wil be back later in the day.

MP Mr Papa
Mr Papa
Member

no, afraid it’s not possible. as Andy says, the user nicename is used since we can’t really use the display name because of the regex needed for finding mentions.

we could hide it from the popup display but bit would still show when initially pasted into the post.

 

CS Carlos Bravo Sanchez
Carlos Bravo Sanchez
Member

Thanks for the response!

Could this fall under your custom plugin offer? Would it be possible to create a mentions plugin that can use the forum name for example? Are there any custom solutions to this?

Regards.

MP Mr Papa
Mr Papa
Member

at the moment, I do not know a good way to use the display name instead…  its because as part of identifying the name as you type…  the problem with a display name is there is no way to recognize when to stop searching for what is being typed as a name…

in other words, a valid display name with a mention, could be:

@this is my name

that is, display names can include spaces and other typical punctuation elements…  so when an @ is typed, we would essentially have to keep checking for a display name for ever since we cannot distinguish a display name from a sentence or any other text…  this absolutely kills performance and makes it hard for the text display to even keep up with the typing because of the constant db queries checking for a display name…

with the user nice name, there is a know starting (the @ symbol) and stopping (space, punctuation, etc) point to end the name checking since they cannot contain spaces or other punctuation type characters…

like you, we would like to change it too… but until we have an efficient method for doing so, we cannot… but will keep looking/working…

CS Carlos Bravo Sanchez
Carlos Bravo Sanchez
Member

Thanks for the explanation and response.

YS Yellow Swordfish
Yellow Swordfish
Member

We do have a discussion on this going on in the background trying to think of an alternative method.