An observation re: private messages

(resisting urge to go take a peek)

I'm glad you caught that!

I'm sure the tech folks will get right on it (as members scurry to remove any too personal or "naughty bits" from their PM files. lol)

It's actually much worse that that. When I just looked at Who's Online, someone was looking at their own private "Change Password" screen. I clicked on the link and was transported to that screen! I could have changed their password if I wanted to! It only asked for "new password", not old one.

FourIsCompany

It's actually much worse that that. When I just looked at Who's Online, someone was looking at their own private "Change Password" screen. I clicked on the link and was transported to that screen! I could have changed their password if I wanted to! It only asked for "new password", not old one.

Hi,

I tried this out. You do indeed go to the Change Password screen but if you look just under the Change Password banner then you should see your own user name. The change password page looks at the currently logged in user (in this case, it would be you) and assumes you want to change your own password.

Sean
 

Carla, are you sure it didn't take you to your OWN "Change Password" screen?

The tech people are aware of the bug re: PM titles. 

 I just tried it with Angelique and it took me to her pw change screen - not my own. I'll post a screenshot, one sec

Oh boy, ok, thanks for clarifying Jewlieee 

sooner

If you click on Who Is Online and someone is viewing a private message, you can see the subject of that message. Not a huge problem, but it makes private messages a little less private.

I've submitted this as a bug. It should instead say "Private Area". 

P.S. While some say Private area, others still say change pw....i'll post screen shots ;p 

Angelique's pw change screen

Private area

Jewlieee, there are a few instances of "private area"....some of them have said that since the beginning.   

Ah ok. I've never really looked at the who's online screen until now ;p 

 If you are reporting a post, in the time that you are in the screen typing a reason for the report, it says "Private Area". :)

I  got Angelique's password screen too:

But - when I clicked on "Forums" from that screen, I was me again.

There are guests looking at our photo albums and stuff, too.  One guest seems to be doing a search? Guests shouldn't be able to search! This feels like a big security hole to me...

sooner, when you saw the subject of the PM was it an active link or just black words?