Not Feasible Username on Public show

[gsharpe1964]

Hi Mark & Basti

I'm a little concerned that when you click on the stats for a member, it shows that members Username, which is half of their login details, a person could probabley attempt to guess the password and get into the account. If the username wasn't on show then the risk of getting your acount hacked would be 50% better.

Could we not have say a "Site Name" with a note that it will be on show in place of the account username??

Just a thought for you to ponder on

 

[Mark]

you can edit the stats template to replace {$username} with {$title}

but from a security standpoint this is a non starter, usernames are public all over the internet... think of forums, youtube, ebay etc. The result is absolutely NOT 50% better chance of getting hacked, from a "probability" standpoint you might be 1% more likely as 99% of security is in the password

 

[gsharpe1964]

Well thats answered that questsion