Me, a moderator, can see emails when emails are anonymized

Support
1

IMG_0849
IMG_08492360Ă—1640 282 KB

the site this issue happens in is https://forum.creative.gimkit.com running version 3.5.0.beta2-dev, a slightly outdated version, i think it happened in older versions, but i never bothered to report it

When a user is made anonymous, the email will show up in logs . And considering a moderator can very rarely go corrupt, this can cause some serious problems if one does go corrupt as they can just get the email by anonymizing the user, but how likely would this happen?

1 Like
3

You need to uncheck the “Log anonymizer details” setting to prevent this from happening again. Check out the discussion here:

3 Likes
4

I reminded the administrator about this via email. As I am only a moderator

2 Likes
6

I noticed that this was moved from Bug to Support. I still think this is a bug.

If the moderators view emails site setting is disabled, moderators shouldn’t see emails in logs and it shouldn’t be necessary to disable logging to prevent that.

I checked how the IP address that is logged when you delete a user is treated:

  • Admins can see it
    image(3)
  • Moderators can also see it if moderators view ip is enabled (default).
    image(3)
  • Moderators cannot see the IP if moderators view ip is disabled.
    image(4)

So why isn’t the same rule applied to email addresses on anonymization?
I would expect to see something similar:

But currently, they can still see it. This feels even worse because moderators view emails is disabled by default.

5 Likes