Monstra → Posts by xxwebplus
It would be better if there was an opportunity to switch off the user listing completely. Even if the menu entry does not exist, the user profiles can still be shown to anyone, just by typing /users after the URL. And because the emails are shown, this could be a rich source for spammers. The email addresses are masked in the source code, but nevertheless Emails of users should never be shown to the public.
@Hi Torsten-K
go plugins/box/users/views/frontend/profile.view.php
line 6 remove
Nothing change
please contact me via the personal website http://xxwebplus.eu/contact you can send me Access codes for ftp to be able to check that the problem!
please copy it here
# # This file is part of the Monstra. # # (c) Romanenko Sergey / Awilum# # For the full copyright and license information, please view the LICENSE # file that was distributed with this source code. # # Set default charset utf-8 AddDefaultCharset UTF-8 # PHP 5, Apache 1 and 2. php_flag magic_quotes_gpc off php_flag magic_quotes_sybase off php_flag register_globals off RewriteEngine on ## Begin - Rewrite rules to block out some common exploits. # If you experience problems on your site block out the operations listed below # This attempts to block the most common type of exploit `attempts` to Monstra # # Block out any script trying to base64_encode data within the URL. RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR] # Block out any script that includes a