This was reported before here but it seems to be an issue again.
Total donors and Total donations are shown to the user regardless of their can view donations permission.
I would suggest just not showing the stats widget at all if the user can't view donations
If you don't mind me suggesting a code fix
donate/widgets/donateStats.php:L52
if( !\IPS\Member::loggedIn()->group['g_dt_view_donations'] ) { return ''; }
In the same funciton, the latest donator is already guarded by that same check, which can be removed (line 112, before modifications)
Recommended Comments
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.