Viewing 5 replies - 1 through 5 (of 5 total)
  • boldock

    (@boldock)

    I ‘ve got same problem. i think it’s a little bit dangerous for administrators
    Is there a solution?

    Thread Starter ronchicago

    (@ronchicago)

    i had made a to-do note to deactivate plugin. no one on forum / author was responding. grateful someone else agrees. i will hold off a bit longer to see if there is more info.

    Txanny

    (@txanny)

    No, there is not a solution. This is the way WordPress does it for everything. It is used for author pages, and for anything that needs a unique user identificator.

    This is like most big sites on Internet. Your username is used in a public manner because is the only information which cannot be changed and we need to work over something that never will change.

    It’s not only WordPress. Many big sites expose your user name: a couple of examples are Google and Microsoft where your login ID is your public email address. Another example is OpenID, where your login ID is your site URL.

    So, it is not dangerous if you have a secure well-formed password.

    Of course, you can report a feature request to the tracker: https://tracker.alkivia.org suggesting some kind of solution to your issue. We will have it into consideration.

    Thread Starter ronchicago

    (@ronchicago)

    Txanny, thanks for clearing things up. Your support forum is excellent btw. WordPress is very security conscious, and one of their tips is to hide ( maybe i’m assuming too much – WP suggests getting rid of the default ” admin ” ) the user name. Maybe a WP work-around or tip will happen.

    If read on the developers list something about this. By now them would not change this behavior.

    I tested to change it to something else, but then you have to fight against duplicates, and some WP functions don’t work as expected (Like linking authors with profiles, and some other features that rely on the WP username).

    Tested also using the display name with some success, but when a user changes the display name, also his url changes. This makes search engines like Google to receive 404 errors (Not Found), and the site lose position on it. Another problem doing this way, more important, is to use a non-indexed name, with large sites with many users, this makes it to slow down.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘[Plugin: Alkivia Open Community] Username exposed’ is closed to new replies.