Private user profiles can be found via url

  • Resolved 007elt

    (@007elt)


    4 years, 7 months ago

    Hi,
    We have some members who are displayed publicly in our trainer directory whereas others are only site members privately. From the trainer directory, you can click on the individual profile and will be sent to the user page where the individual profile of the trainer is shown in greater detail. Trainers are listed with their first and last name. When you are on the user page it is possible to put in any user name e.g https://www.mywebsite/user/anyusername or e.g. https://www.mywebsite/user/first+lastname (possible format in UM) and the profile (which is supposed to be private) will also show up even if this person is not part of the trainer directory.
    I have set people up so that they do not have Ultimate Member directory or role i.e. just subscribers, register people in a different role, make individual profiles private, renamed user page to something else,etc. but it doesn’t seem to make a distance,….you could still get the a profile on anyone on the website if you enter either the user name or first+last name on the user page. This is a problem because of data protection. Does anyone have an idea on what I could do here to really hide certain users from appearing at all. Thanks in advance for any assistance.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @007elt

    You can try adding the UM form shortcode inside the [um_show_content] shortcode to maintain the restriction.

    Please read this doc article in the link: https://docs.ultimatemember.com/article/226-restrict-content-on-a-page-post-to-specific-users-community-role

    Regards,

    Thread Starter 007elt

    (@007elt)

    Hi Champ,
    Thanks very much for getting back to me. It led me in the right direction! Embedding the short code in the short code did the trick. I am outlining what I had to do as it might be helpful for someone else. It would be great, however, if there were some type of feature in UM in the future whereby you could really separate public and private user directories and profiles a little easier.

    Example of what I did:

    User Page

    [ultimatemember form_id=”6495″]
    [um_show_content roles=’subscriber’][ultimatemember form_id=”1635″][/um_show_content]

    [um_show_content roles=’subscriber’]
    Note to myself …. DO NOT DELETE THIS PAGE “6495” shows “public” trainer profiles . “1635” is for all members profiles. It appears necessary to add 1635 here so that the profile form will also appear for users when they login to back end. It was also necessary to hide the page title (see Custom CSS Child theme)because if someone happened to put in a non public name after URL on the front end they would still get a page with the person’s name on it i.e the page title.even if they couldn’t see further details
    [/um_show_content]

    Member page

    [um_show_content roles=’administrator’] [ultimatemember form_id=”1636″][/um_show_content]
    [um_show_content roles=’administrator’]
    Notes to myself DO NOT DELETE THIS PAGE Note “1636” is directory for all members. I also restricted access below via Ultimate Member check box to Logged in Users. This means that only the administrator can see list when logged in. It was also necessary to hide the page title see Custom CSS because if someone put in URL e.g. Members on the Front End they would still get the page title Therefore I have password protected this document.
    [/um_show_content]

    • This reply was modified 4 years, 7 months ago by 007elt.
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Private user profiles can be found via url’ is closed to new replies.