phpBB3 IP Issue
There is an IP view issue with phpBB version 3. And phpBB people don't care when it was brought up to them. Basically, the IP addresses of users can be viewed by more than people may know.
For those that don't know, phpBB3 is the current version of phpBB forum software that is widely used around the internet.
There is a line in the file viewonline.php in the forum root directory that broadcasts users IP's. But removing this line, the IP's will not be viewable in the Whois Online area of phpBB3 if you have admins who have very limit admin duty on your forum. I think phpBB people should make the IP's appear there as a selectable choice but they don't care about it. This is the facts. So to help make your users get that added security, delete the line in the file. And remember this will each upgrade because it will never be fixed by phpBB apparently.
The line is:
For those that don't know, phpBB3 is the current version of phpBB forum software that is widely used around the internet.
There is a line in the file viewonline.php in the forum root directory that broadcasts users IP's. But removing this line, the IP's will not be viewable in the Whois Online area of phpBB3 if you have admins who have very limit admin duty on your forum. I think phpBB people should make the IP's appear there as a selectable choice but they don't care about it. This is the facts. So to help make your users get that added security, delete the line in the file. And remember this will each upgrade because it will never be fixed by phpBB apparently.
The line is:
'USER_IP' => ($auth->acl_get('a_')) ? (($mode == 'lookup' && $session_id == $row['session_id']) ? gethostbyaddr($row['session_ip']) : $row['session_ip']) : '',
