Despite the insertion of the recommended code on the page, it happens that unregistered users find a way to send messages to registered members via IM ... why?

This system seems to have glitches, it's not safe and it is unclear why it was not implemented and re-captcha in it?

How to restore the option that is described in the article:
http://forums.mb-themes.com/instant-messenger-plugin/unregistered-users/


Tnx

@alexborg
http://forums.mb-themes.com/instant-messenger-plugin/how-can-i-set-messenger-function-just-for-registered-member-only/
http://forums.mb-themes.com/instant-messenger-plugin/unregistered-users/

It does not work! We all read what you write. In some ways unregistered users still find a way to send a message ... that we see in the admin panel ... this is a big mistake!

@alexborg
I will take a look on it.

No problem, just pay attention to the fact that no one other than the registered user may not see a message such .... example:


www.mysite.com/im-messages/18/9WXpVXsIEw


!!!



I think that there is a problem somewhere that spammers and others find the failure and to use.

It is very dangerous for secure communication.

@alexborg
How is going to get that secret key bot?

That's the problem ... how can one get to the secret key if it is not registered in the past and has no insight into the message registered user?

@alexborg
Simply it is not possible. Bot cannot find the code, just in case it would have access into database.

Or, if someone falsely set tasks just to see who is the message to the conversation and can then write messages although it is not a registered member.

We checked and working. When you open the box to contact the user, showing the secret code.

So it is not a bot, but a user who has found a secret code via fake accounts and writes messages without problems, although not registered/logged in to the site


It should also somehow disabled.