[wwwSENSERELYcom]

yes but the god use leaves a trace in the pageviews table, where is/are the queries for that where i can add WHERE userid > 1???

[dollars5]

But where does other users see the detials of page_view table?
Even should you use the page_statistics module - it just only gets the count and not all those who saw the pages. So you can just ignore that page_view most users will not make most use of this table.

[wwwSENSERELYcom]

no, the page view is used in theprofile pages to show which users have viewed the profile. it's called Last 5 people to view this profile:

of course I could just delete this information showing, if I could find it, or I could just modify the query to ignore user 1

[dollars5]

Just edit last_viewers() function in /libs/pageview.php that the query there ignores admin user. Just change pv_user_id > 0 to pv_user_id > 1 - but if the site has more than 1 god user - you will have to list them all in the query.

It is a good practice to just have only 1 God user and there are other level of users like admins - which can be used to administer links etc. That should be of some help.

[tristonezhou]

Originally Posted by dollars5

also we added a small additional query to remove the user for top users list (where user_id > 1) - this way there is less possibility that a hacker can predict and attach on any system.

Could you give more details about this? Such as which page should I change and how to change. Thanks very much.

[dollars5]

Generally the users are listed in following places:
1] top-users: topusers.php

case 0: // sort users alphabetically
		$select = "SELECT user_id";
 		$from_where = " FROM " . table_users . " WHERE user_id != 1 ";
 		$order_by = " ORDER BY user_karma DESC ";
		break;

- so admin is not listed in the top-user

2] last_viewers() function in /libs/pageview.php - pv_user_id > 0 to pv_user_id > 1
This makes admin not shown in the who visited this profile page

If you see the users listed in other places let me know I will try to provide you a way to hide the admin.
I have not edited the who votes as the admin is reserved from voting in my proposed case

[AshDigg]

The 'god' users are now hidden starting with the 9.6 release.

[dollars5]

Wow - that is great news - good work Ash.

Also as pointed here Pligg Security Vulnerability - Password Change Request - God should be hidden from profile views too.

pls change the user_id to user_level in my above post.

[tristonezhou]

Thanks dollars5. These information are really helpful.

[haxhax]

In this patch i cann't modify password