Hello,
I would like to use the user review system, but it is simply not possible because the email address of a user who enters a review via the form is apparently saved as a post that is publicly viewable.
The email entry that is retrievable in the dashboard is also retrievable from the outside. Why do you create the email list in this way? This makes the feature absolutely unusable which is a real pity.
Please think about security and European data protection regulations when programming new features.
Hello,
The email was never added as a post, as seen in this video -> https://www.screencast.com/t/oIMMJQqyE
In the future, please check if you don’t have another plugin that interferes with the theme, as for example, now I think you have a conflicting plugin.
Thank you!
Sorry, I was a little imprecise.
Indeed, the user review email-adress is not shown in the post.
The problem is this:
A user’s registered review email is publicly accessible via the link
http://www.domain.com/tdc-review-email/name-nameprovider-com/.
It doesn’t matter whether the user review template is set to “pending” or “published”. The e-mail address is published after a user review has been submitted. And that is – from my point of view – highly critical.
Is there a way to prevent user review email-adress from being published?
Thank you!
Hello,
Indeed, I verified as you said, and yes, sit seems that we missed that part in the testing process. So now I added it to the list for future changes.
Thank you for that information!
