UBB.Developers Forums UBB.threads 6 Bug Reports Private Message Problem [5.3]

When a user is deleted their private messages remain in the private message table. If another user then registers with the same name as was deleted, they will see the private messages in their control panel. Nasty!

This is a problem that isn't so easy to resolve. We don't want to just go out and delete all messages with M_Username = to the deleted user. That would eliminate messages to others that they want to keep.

Instead, perhaps the U_Number from w3t_users should be used in the place of M_Username (or as well). Then when we delete a user, we don't have to delete anything from the Messages table and since U_Number is unique, no one else will ever see their messages.

This shouldn't be happening. There is a block of code in dodeleteuser.php that looks like this:

// ----------------------------------------------
// Delete any private messages for this user
   $query = "
    DELETE FROM w3t_Messages
    WHERE M_Username = '$User_q'
   ";
   $dbh -> do_query($query);

That code block will delete any private messages that were addressed to that user.

Ah ha! Did some digging. The delete isn't in dopurgeusers.php. That must be why we have messages left over. Also noticed the Delete from the Moderators table isn't in there too.

That would explain it. I'll post a fix on the bug fixes forum. Thanks for tracking that down.