[jucs]

This doesn't work if you have a user name specified like Joe Smith which I do on my board rather than jsmith or something withone word. It gives this error:

Viewing User PM's is restricted.

[Farid]

Great hack!!!
I've installed it and it works perfectly.

PS : I am new here

[Scott MacVicar]

did you read the bit about restricting access to pm?

you need to enter your userid with the variable at the top of pm.php

Scott

[jucs]

I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.

[Psychdrone]

Yes it dose, dude dont come off like that, saying that the hack dosn't work!! YOu did somethign wrong!

[Scott MacVicar]

You've done something wrong,

in no aspect of the code does the hack use the username to get information, it only uses the Userid to get the pm's and then gets the username for that.

If your still getting the error then you have to make sure your userid is correct.


Scott

[jucs]

Ok, I never said it didn't work. It obviously works. I never understood it was USERID and not USERNAME. Me bad. Sorry bout that!

Thanks!

[bira]

I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.

[JTMON]

Originally posted by jucs
I did do that. That's my point. Userid's like this: Joe Smith do not work.

That's how we have users sign up. With both first and last name with a space.

The hack cannot handle a first and last name with a space.

[JTMON]

Originally posted by bira
I would just like to warn those admins who installed this hack from a legal standpoint.

If you do not clearly state both in your privacy statement and in your Private Messaging area (eg at the bottom) that PMs may be viewed by administrators, you are making yourself liable to ANY user suing you for privacy invasion.

Those who say that this is on your own "property" don't know the law.

ISPs, for example, store your e-mails. PMs are by default person-to-person exchange - their name suggests as such, and any reasonable user is allowed to assume by the name alone that they are as such = and are therefore defined by law in US and EU the same as e-mails. If an ISP admin was reading your e-mail without your knowledge or permission, you could sue the ISP and win.

The same applies to any service provider who offers "private" person-to-person communication on his premises, but in effect does not warn his users that this is not necessarily the case.

Install the hack all you like, but don't forget to add a warning to your Privacy statement and Private Messaging area. Otherwise, each and every single member of your community can sue you - and win.

Can I have your source for this please?

[JTMON]

I also find this odd since ALL vb admins have this ability and it's not in the default privacy statement

[DarkReaper]

Originally posted by JTMON
I also find this odd since ALL vb admins have this ability and it's not in the default privacy statement

All ISPs have the ability to read your emails as well, and is it mentioned in their privacy statement?

[bira]

JTMON, consult a lawyer.

[JTMON]

Well that helps

Did you happen to ask your lawyer the laws regarding this if the server isn't in the US, if I'm not in the US, etc etc....

[bira]

All known ISPs include the following notice in their terms of service.

Our staff will not look at or read your email unless it is necessary to resolve a technical issue. In almost all cases, we will clearly inform you of the need to do so, and we will seek your permission before opening your mailbox on our servers.

Not only don't you have a notice like that on your website, but you now take it a step further and make it readily available to one or more admins to access and read a user's private communication without as much as asking a user's permission or even notifying him.

That is cause for lawsuit.

My source? this used to be my line of work