• Resolved Ian Pegg

    (@ianpegg)


    Hello,
    Whenever I’ve raised tickets on your support site on behalf of my clients I’ve always assumed that these requests would be private, but recently I’ve noticed that they are publicly viewable.

    Considering the amount of debug info that is requested before a new support request can be submitted, this results in a worrying amount of sensitive data being published publicly. I’m happy to privately share a link to an example page, but I won’t post it here.

    Whilst it’s true that much of this information could be gleaned easily using other methods I see no reason to give hackers a head start. Bearing in mind that we need to create an account in order to post it seems sensible to limit viewing to logged in customers too.

    I would’ve sent this request via your contact form instead, but it insists that there was an error trying to send my message.

    Thanks for your help

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Nico

    (@nico23)

    There is actually a checkbox on the bottom of the question form to make topics private. And often people use it for simple question without debug info when there is really no need.

    The public topics you see are only the ones where people did NOT check it.

    I also do not get your point of using this forum that is also public.

    And yes you can convert it to private by editing your question and checking the mentioned “Only visible to admin and moderator.” (It’s just me)

    • This reply was modified 3 years, 6 months ago by Nico.
    Thread Starter Ian Pegg

    (@ianpegg)

    So, it might be more sensible to make any posts that include debug info private by default? It’s quite likely that a lot of people will overlook the checkbox or not fully understand the ramifications of allowing debug info to be posted publicly (or perhaps not fully understand what definition of ‘public’ is being used – i.e. fully indexable by search engines).

    The rest could be left public as I appreciate they do act as a kind of informal knowledgebase. No doubt that helps to cut down on the number of duplicate requests you receive.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Convert support tickets on NextGenThemes to private?’ is closed to new replies.