Skip to:

Opened 14 years ago

Closed 14 years ago

#2615 closed defect (bug) (no action required)

Security Concern: 'Activity' shows Admin's actual username!

Reported by: dougjoseph's profile DougJoseph Owned by:
Milestone: 1.5 Priority: normal
Severity: Version:
Component: Core Keywords: Security, username, nickname, Admin's actual username, activity


Out-of-the-box new BuddyPress installation has a security concern: The 'Activity' areas show the Admin's actual username.

For security purposes, it would be better to have the Admin's actual username hidden, right?

This shows in more than one place.

Change History (2)

#1 @DougJoseph
14 years ago

  • Keywords Security username nickname Admin's actual username activity added

If I understand the issue correctly, the Admin's nickname should be shown, not the actual username. However, I am very new to BuddyPress, so if I am misunderstanding what is going on, just let me know.

#2 @r-a-y
14 years ago

  • Resolution set to invalid
  • Status changed from new to closed

It's the way it is because you haven't changed your display name.

Change your display name from the "My Account > Edit Profile" page.

Or you can also modify this through the WP profile admin page: /wp-admin/profile.php. Select the "Display name publicly as" field to something else.

Keep in mind that your profile URL will still contain your username.

If you have any other issues, please respond to this ticket.

Note: See TracTickets for help on using tickets.