Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Using Modules a...Using Modules a...Message Center Module in DNN 6.2Message Center Module in DNN 6.2
Previous
 
Next
New Post
6/6/2012 12:08 PM
 
I have spent a little bit of time trying to modify jquery.tokeninput.js but the changes I have made haven't allowed me to send messages. If you figure out any way to disable this feature while still allowing messages to be sent, I'd appreciate it if you could let me know. I'm have the exact same security issue as you with this module.
 
New Post
6/14/2012 3:21 AM
 
Steven Roth wrote:
I agree..this does seem to be a security issue. There doesn't appear to be any way to control the level of access to the autocomplete. Using enough characters you can find anyone.

We agree that for us this is a serious privacy issue and a complete showstopper for an otherwise good module. Searching and finding members that do not want to be publically available to other members is a definite negative design fault for many public sites. I can't understand how this could not have been considered.

 


Craig Hubbard TechnicaOne Business Solutions - Australia
 
New Post
6/14/2012 9:59 AM
 
Craig, have you discovered any other modules that have similar features to the message center without this searching capability?
 
New Post
6/14/2012 11:07 AM
 

Hi Fred

We have no problem with the searching for members when sending messages or the member directory , however to  roles other than admin or host the results have to consider if the member has opted-in to be listed publicly - or social group/s ( which I think is the intent, but does not appear to work this way)

While this would be a great enhancement to many web sites, the issue is a showstopper but not urgent enough for us to go looking for an alternative solution at this time.

I would be more interested in a response to indicate that the current release is working as designed or not. This would help us determine if we wait for a fix or do have to look for a better solution. The reason for this last statement is that reading through several posts I am not sure (or confused) as to the intended design, Statements from DNN Corp members appear to conflict.

So to answer your question, No, we haven't looked around yet due to it being considered by us as a "nice to have enhancement" and not critical at this time.


Craig Hubbard TechnicaOne Business Solutions - Australia
 
New Post
6/14/2012 1:21 PM
 
Just a note, this behavior is different that what was previously part of Active Social. So, for user migrating/upgrading this would represent a change in functional behavior and possibly privacy policy.


Steven Webster
Manager, Community Platform
F5 Networks, DevCentral
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Using Modules a...Using Modules a...Message Center Module in DNN 6.2Message Center Module in DNN 6.2


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out