aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/styles/prosilver/template/viewforum_body.html
diff options
context:
space:
mode:
authornomind60s <nomind60s@users.noreply.github.com>2017-03-29 13:19:55 -0600
committernomind60s <nomind60s@users.noreply.github.com>2017-03-29 13:19:55 -0600
commit80b72e3d0b0a3ca81157d2209fd607e10b86eba1 (patch)
treea902d87c55a63e7309a4d13dd8da48cf5e5af432 /phpBB/styles/prosilver/template/viewforum_body.html
parentb567c6e2414d069ba54f7a924c952069aa115237 (diff)
downloadforums-80b72e3d0b0a3ca81157d2209fd607e10b86eba1.tar
forums-80b72e3d0b0a3ca81157d2209fd607e10b86eba1.tar.gz
forums-80b72e3d0b0a3ca81157d2209fd607e10b86eba1.tar.bz2
forums-80b72e3d0b0a3ca81157d2209fd607e10b86eba1.tar.xz
forums-80b72e3d0b0a3ca81157d2209fd607e10b86eba1.zip
[ticket/14498] Don't display 'Who is online' members when permission is No
When the user permission 'Can view profiles, memberlist and online list' is set to No (or Never) the user should not be able to see which members are online in the following places, index page, view topic and view forum. Before this change, guests and bots would see the list of members who are online, which doesn't match with the user permission and could create privacy issues where guests or bots could track when a member was online. PHPBB3-14498
Diffstat (limited to 'phpBB/styles/prosilver/template/viewforum_body.html')
-rw-r--r--phpBB/styles/prosilver/template/viewforum_body.html4
1 files changed, 2 insertions, 2 deletions
diff --git a/phpBB/styles/prosilver/template/viewforum_body.html b/phpBB/styles/prosilver/template/viewforum_body.html
index 643b78823f..f6fc07ea55 100644
--- a/phpBB/styles/prosilver/template/viewforum_body.html
+++ b/phpBB/styles/prosilver/template/viewforum_body.html
@@ -261,9 +261,9 @@
<!-- INCLUDE jumpbox.html -->
-<!-- IF S_DISPLAY_ONLINE_LIST -->
+<!-- IF S_DISPLAY_ONLINE_LIST and U_VIEWONLINE -->
<div class="stat-block online-list">
- <h3><!-- IF U_VIEWONLINE --><a href="{U_VIEWONLINE}">{L_WHO_IS_ONLINE}</a><!-- ELSE -->{L_WHO_IS_ONLINE}<!-- ENDIF --></h3>
+ <h3><a href="{U_VIEWONLINE}">{L_WHO_IS_ONLINE}</a></h3>
<p>{LOGGED_IN_USER_LIST}</p>
</div>
<!-- ENDIF -->