隐藏邀请中的“电子邮件账户已存在”消息

Would it be possible to add the invite form to this list too?

Currently, if I put an existing account email in the ‘restrict to email’ box in the invite modal it informs me that there is already an account associated with it, and gives me a link to it.

Is there a setting to make this more anonymous, like the setting above?


Edit: I can customise the invite.user_exists text to take out the link, which was my immediate concern, but I can’t think of a good alternative that doesn’t say ‘Congratulations! You’ve found a member’s email address!’

Anyone have any suggestions?

Update: I copied the language from the topic_invite.user_exists and tweaked it a little:

“Sorry, that user has already been invited to the forum.”

I’m still open to better suggestions. :slightly_smiling_face:

6 个赞

我同意这是一个隐私疏忽 @dan @tobiaseigen,我们应该在这里规范代码路径。谢谢 @JammyDodger

6 个赞

抓得好!抱歉之前你第一次报告时我没注意到。当然,我可以确认这是一个问题,如果信任级别被调低到 TL2,就像社区网站默认的那样。我刚才做了一个测试,提醒自己如果用已有的电子邮件地址注册新账户会发生什么,它实际上根本不显示任何错误,并允许你像使用新电子邮件地址一样提交表单。然后你收到的电子邮件会解释刚才发生了什么,主题是“账户已存在”。

我们也可以对邀请做同样的事情,如果启用了 hide email address taken 管理员设置。只需让用户为该电子邮件地址创建邀请,而不显示任何错误,然后当拥有该电子邮件地址的人尝试使用它来接受邀请时,它只会将他们引导到网站的登录页面。如果他们已经登录,他们将直接进入网站。

4 个赞

修复已合并 :confetti_ball:

5 个赞