User pages will give a 404 or a permission denied depending on the status of the user.

#5 2133887_5.patch1.17 KBjeroen_betawerk
#3 2133887_2.patch2.95 KBJeremyFrench


JeremyFrench’s picture

I have patch, but can't see where to upload on the new

JeremyFrench’s picture

3.21 KB
JeremyFrench’s picture

2.95 KB

First patch did not re apply for me. Trying this one.

Matt V.’s picture

Status: Active » Needs review
jeroen_betawerk’s picture

1.17 KB

I've made a quick update to the patch so it applies to the 1.2 release.

The patch works for me, user profile pages now give a 404 whether the user exists or not (if you don't have permission to access profile pages).

Joseph Zhao’s picture

Version: 7.x-1.0 » 7.x-1.2

Do we have any progress on this issue?

arsn’s picture

Category: Feature request » Bug report
Status: Needs review » Reviewed & tested by the community


Thanks for the 2133887_5.patch which is working fine for me against version 7.x-1.2. This is actually fixing a bug since the very purpose of this module is preventing user enumeration.

I am looking forward to see it merged in the near future!

Best regards