Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Admins can view user's PM's Details »
Admins can view user's PM's
Mod Version: 1.00, by Scott MacVicar (Member) Scott MacVicar is offline
Developer Last Online: Mar 2016 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 2.2.x Rating: (0 vote - 0 average) Installs: 121
Released: 23 Nov 2001 Last Update: Never Downloads: 69
Not Supported  

After some requests and a debate in the requests forum I've finally finished the majority of this hack. It allows the admin to find a user via the current method in the control panel then click view user's pm's. They are then shown all the pm's in the users folders.

Includes admin logging and is designed to use the cp.css file which is already used by the control panel. I considered adding a search feature but it would be hard without indexing all of the pm's the way vBulletin already does. This means it would be a very limited search.
You can also now select which admins can view user pm's this is done the same way that restriction to the adminlogging is done, the variable is at the top of pm.php

This hack involves uploading pm.php to the admin directory then following the instructions which requires you adding the two links within /admin/user.php

Updated 25th November 2001 @ 22:39

Update was to fix broken smilies by disabling them and to show pm's in all folders not just the inbox. To update simply upload pm.php to your admin folder again.

Scott

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
  #61  
Old 28 Nov 2001, 02:27
jucs jucs is offline
 
Join Date: Nov 2001
This doesn't work if you have a user name specified like Joe Smith which I do on my board rather than jsmith or something withone word. It gives this error:

Viewing User PM's is restricted.
Reply With Quote
  #62  
Old 28 Nov 2001, 10:53
Farid's Avatar
Farid Farid is offline
 
Join Date: Nov 2001
Great hack!!!
I've installed it and it works perfectly.

PS : I am new here
Reply With Quote
  #63  
Old 28 Nov 2001, 19:09
Scott MacVicar Scott MacVicar is offline
 
Join Date: Oct 2001
did you read the bit about restricting access to pm?

you need to enter your userid with the variable at the top of pm.php

Scott
__________________
Scott MacVicar
vBulletin Developer
Reply With Quote
  #64  
Old 29 Nov 2001, 01:53
jucs jucs is offline
 
Join Date: Nov 2001
I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.
Reply With Quote
  #65  
Old 29 Nov 2001, 02:55
Psychdrone Psychdrone is offline
 
Join Date: Nov 2001
Yes it dose, dude dont come off like that, saying that the hack dosn't work!! YOu did somethign wrong!
Reply With Quote
  #66  
Old 29 Nov 2001, 08:40
Scott MacVicar Scott MacVicar is offline
 
Join Date: Oct 2001
You've done something wrong,

in no aspect of the code does the hack use the username to get information, it only uses the Userid to get the pm's and then gets the username for that.

If your still getting the error then you have to make sure your userid is correct.


Scott
__________________
Scott MacVicar
vBulletin Developer
Reply With Quote
  #67  
Old 30 Nov 2001, 01:17
jucs jucs is offline
 
Join Date: Nov 2001
Ok, I never said it didn't work. It obviously works. I never understood it was USERID and not USERNAME. Me bad. Sorry bout that!

Thanks!

Last edited by jucs; 30 Nov 2001 at 01:35.
Reply With Quote
  #68  
Old 30 Nov 2001, 03:26
bira's Avatar
bira bira is offline
 
Join Date: Nov 2001
I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.

Last edited by bira; 30 Nov 2001 at 03:29.
Reply With Quote
  #69  
Old 30 Nov 2001, 03:26
JTMON's Avatar
JTMON JTMON is offline
 
Join Date: Nov 2001
Originally posted by jucs
I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.
Reply With Quote
  #70  
Old 30 Nov 2001, 03:33
JTMON's Avatar
JTMON JTMON is offline
 
Join Date: Nov 2001
Originally posted by bira
I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.
Can I have your source for this please?
Reply With Quote
  #71  
Old 30 Nov 2001, 03:48
JTMON's Avatar
JTMON JTMON is offline
 
Join Date: Nov 2001
I also find this odd since ALL vb admins have this ability and it's not in the default privacy statement
Reply With Quote
  #72  
Old 30 Nov 2001, 04:21
DarkReaper DarkReaper is offline
 
Join Date: Oct 2001
Originally posted by JTMON
I also find this odd since ALL vb admins have this ability and it's not in the default privacy statement

All ISPs have the ability to read your emails as well, and is it mentioned in their privacy statement?
Reply With Quote
  #73  
Old 30 Nov 2001, 04:27
bira's Avatar
bira bira is offline
 
Join Date: Nov 2001
JTMON, consult a lawyer.
Reply With Quote
  #74  
Old 30 Nov 2001, 04:29
JTMON's Avatar
JTMON JTMON is offline
 
Join Date: Nov 2001
Well that helps

Did you happen to ask your lawyer the laws regarding this if the server isn't in the US, if I'm not in the US, etc etc....
Reply With Quote
  #75  
Old 30 Nov 2001, 04:33
bira's Avatar
bira bira is offline
 
Join Date: Nov 2001
All known ISPs include the following notice in their terms of service.

Our staff will not look at or read your email unless it is necessary to resolve a technical issue. In almost all cases, we will clearly inform you of the need to do so, and we will seek your permission before opening your mailbox on our servers.
Not only don't you have a notice like that on your website, but you now take it a step further and make it readily available to one or more admins to access and read a user's private communication without as much as asking a user's permission or even notifying him.

That is cause for lawsuit.

My source? this used to be my line of work
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 10:18.

Layout Options | Width: Wide Color: