Skip to:
Content

BuddyPress.org

Opened 16 years ago

Closed 16 years ago

#2615 closed defect (bug) (no action required)

Security Concern: 'Activity' shows Admin's actual username!

Reported by: DougJoseph Owned by:
Priority: normal Milestone: 1.5
Component: Core Version:
Severity: Keywords: Security, username, nickname, Admin's actual username, activity
Cc:

Description

Out-of-the-box new BuddyPress installation has a security concern: The 'Activity' areas show the Admin's actual username.

For security purposes, it would be better to have the Admin's actual username hidden, right?

This shows in more than one place.

Change History (2)

#1 @DougJoseph
16 years ago

  • Keywords Security username nickname Admin's actual username activity added

If I understand the issue correctly, the Admin's nickname should be shown, not the actual username. However, I am very new to BuddyPress, so if I am misunderstanding what is going on, just let me know.

#2 @r-a-y
16 years ago

  • Resolution → invalid
  • Status new → closed

It's the way it is because you haven't changed your display name.

Change your display name from the "My Account > Edit Profile" page.

Or you can also modify this through the WP profile admin page: /wp-admin/profile.php. Select the "Display name publicly as" field to something else.

Keep in mind that your profile URL will still contain your username.

If you have any other issues, please respond to this ticket.

Note: See TracTickets for help on using tickets.