Members Directory "private" accessible from homepage by any visitor!

[Vanessa Moulédous]

Hi NCs,

after a few months as the NC of www.creativeprofessionalsworldwide.com, a private network, yesterday night, I noticed something incredible I hadn't noticed so far:

- My network is set up  as private

- but, as a teaser to recruit new Members, I let some pages accessible to anyone,

- among which the homepage

- on my homepage, I put a "Members" box I selected from the "Features & Layouts" to make it more attractive and dynamic

- and I've got one tab called "Members" where you can find the Member's directory...

- that I set up as "private".

One of the asset of my network being the Members, having the Members Directory accessible to the Members only was a key feature.

So far, so good. Except that yesterday night, at the bottom right on the Members box on the homepage, I noticed a "View all members" button which was...clickable by any visitor!! Leading them to the full Members Directory where they could click on any Member and discover their profile, contact details etc. In one night, any visitor could have "stolen" my Members databasis!

 

Have you noticed that yourself? How did you solve it? For now, I've turned off the Members box and replaced it by a faked fixed image...Not a geek, so I made it my arty-crafty way!

 

Any help from Ning reps or clever/geek NCs will be very much appreciated :-)

 

Vanessa.

[Vanessa Moulédous]

Hi Bon,

other Members told me they noticed the same actually. And I'm surprised about your comment since when I sign out, I've always been able to only see what anyone outside the network could see. Whichis of great help to double-check your privacy etc. 

[Tyler Durbin]

http://www.creativeprofessionalsworldwide.com/profiles/members

 

This still shows all of your members...you can change the settings so that you have to be logged in to see this page.

[Vanessa Moulédous]

Hi Tyler,

The visitors can't see a tab with "Members Directory". So unless they're a little bit accustomed to urls and they type in the url you've written, they shouldn't see that page. Check it out on my main page. 

 

No, I guess it's kind of a bug, which is surprising: for instance, with the events page, it doesn't happen. My main page being public, anyone can see the events. If you click on an event, you can arrive on the page of the event. However, since the page of my events are private, you can't RSVP etc. So in the case of the Members Directory, I would have expected to be able to click on "view all", arrive on the Members Directory but not be able to click on each Member and see his/her whole profile...