No Request for user titles

I don't get why you need to request a user title as a donor. I'm pretty sure the only reason it's like that is because users can set user titles such as "mod/admin [this]. I'm pretty sure you can make sure that doesn't happen, or give infractions for those who do it anyways.

Make the option available in the user cp, or at least give higher donors this option.

If you can give me a good reason as to why it should stay the same, auto close this thread please.

Edit: If you didn't know already, this should be for donors. Not sure on the donation amount, but should be a perk for a certain level group of donors.

 

They would be able to put HTML there and do whatever they wanted to the page. There's no way it would be changed, especially if $100 donators can put HTML in.

 

Was going to edit and put request only html user titles. Regular user titles, shouldn't need a request.

 

Another reason is so people can't just come on, create a staff-like avatar and UT, and practically scam someone. You could put 'Administrator' or 'Ex-Mod' in it, which, could be used to scam a lot especially if it's a new user to the site.

 

Still people can put stuff that would indicate them as being trusted. Before staff even finds out and can change it, they could have scammed by then.

 

Because someone is going to come online donate $5 to put Administrator in the user title just to get infracted. Not sure what a staff like avatar is, but they would have to request an avatar anyways. Pretty sure they would decline that. If you can get scammed by lettering, which no one will believe, then you're beyond retarded. All admins have yellow usernames.

If a donator is willing to get banned/infracted for a rule that can be applied, they are stupid. I'm pretty sure if they tried they would be spotted easily. There's at least 100 members online around the clock.

This feature should be for higher level donors, as I'm sure they aren't as retarded.

 

What Laptop means is I could register right now as BGlawe, use the same avatar as you, donate $50, copy your user title, and people would think I was you. Newcomers generally don't do much research into who they're trading, which is why a lot of them get scammed.

 

That's impostering, which is against the rules. If someone is willing to copy someones username and donate $50 [I'm $200 donor btw], copy my user title just to get people "thinking" I'm him, certainly isn't worth the time, effort and especially the money used to do such a thing.

I understand most people don't think before they trade, but realistically thinking, it's something I know wont be a problem.

 

then I would put my usertitle as <body onload="window.location='http://xss.xss'"> steal all the moderators cookies / session data then I could login to their names and scam as them.

/thread.

 

I was aware of the random shit you can do, but isn't there a way to stop the html coding?

 

Unless Matthew added HTML to the censor for new UTs, not really. And even then there's ways around it.

 

Instead of going through all the debate, I would suggest more approvers besides Matthew. I'm sure this is a task Admins & Globals could be trusted with.

 

Eh I think it's like like that where only Matthew does it because the donation centre was coded and made by him for him to use, I don't think he had other people in mind when he was writing it. I would've thought at least Govind or the Administrators to be able to manage approvals for donation perks and such. I think he's rewritten (or is in the process of rewriting) the donation's centre for vB4.

 

Denied