Am I the only one who is having this problem?
In testing out my site, I have found that when I log in as another user, not the Admin, I can click "Settings" and go to Your Name, I can change the name on the account. When I click "Save" and go to the profile, the name is indeed changed.That will cause problems with people who are up to no good trying to imitate someone else, take someone's identity.
I have searched all over Elgg and the Elgg group on google and haven't found any help. Any ideas as to why this is happening and how to prevent users from changing their Account Name????
Any help would be greatly appreciated!!!!!
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
Madshark,
I'm glad to hear about the updating of the change in user names. But in your scenerio, if I were to change my name after causing chaos or maybe even harassing you, and then changed my name, how would you know that the new person is me? Especialy if my profile is private? I do see what you mean by the ban option, so other than coding the display name, I'm kinda stuck.
Sirwan,
I'm glad to know that I'm not the only person who sees problems with this situation. I think usernames should be unique and not changeable. Annoying would be an understatement!!!!
even tho your profile is private you can still see the display name. plus lets say u abused me via a comment and then changed your name ? the comment would reflect the change in name so thats one way of knowing.
Its a two way street on this one i like having this option open. i think facebook also allows it if im not mistaken but it has some sort of verfication mechanism.
Having said that i can level with you on when a user changes his/her name and their on my profile you go who the heck is that...
A simple fix for this might be giving only admins the possibility to change a name. that way users can request a name change and you can decide if its aproved or not.
But as far as elgg is concerned i think there are more pressing matters like proper profile fields editors and delete that is very much more required imho.
just read kevins post only now ... kevin if you have the plugin lying around that would be very useful ..
Madshark,
I fully understand what you are saying. And your explanations kinda make sense. I just don't want to have "Dave" 20 million times (exaggeration). I'd rather people have one unique name per user and that's it.
And I agree GILLION% with ELGG having more pressing issues to be concerned with. I just think a unique name should be a given!
Thanks for explaining the other side of the issue!
So many posts on such a simple subject ;-O
(1) No matter what the Display Name is -- if you mouse-over a profile icon -- eg. mouse-over my icon right here and you will see my true-name on the browser status bar - at the bottom of your browser
(2) Please have a look at my test Elgg site here ==> http://www.ensci.us/elgg15/
(3) Register there with Your Display Name and Real Name
(4) The go to your Settings and see if you can change either one of your names ?
(*) You wll find that you cannot change your name -- not on my test site !!! LOL ;-)
Drup,
Ok, then what did you do to prevent that from happening? Because using my test users, I can change the display name on my site.
Any help would be greatly appreciated!
Tami
id like to know too...
http://community.elgg.org/mod/groups/topicposts.php?topic=102121&group_guid=52477
be there or be square !?
Hi Dc,
The link to the page above doesn't excist any longer could you please let me know how I can go about removing the option for standard users to change their screen name.
Would really apriciat it.
Tony
Hello All,
I would like to make multiple alias of any user. Like User A have 2 alias in the system like A and B.
When user wants to post anything then he/she has to select alias for display, if he selects A then displayed as A posted something, else if he selects B then displayed as B posted something.
But internally it goes to same user. So user can edit/delete that post.
Is this possible with any plugin?
Thanks!
- Previous
- 1
- 2
- Next
You must log in to post replies.