Data leak in default settings

  • Resolved lgehr

    (@lgehr)


    6 years, 8 months ago

    Hello,

    I’m currently working on building a website which uses Booking Calendar and this Plugin.
    I found out that the export functionality of this plugin is kind of chatty when it comes to personal information of the guests which do the booking.
    This is because all the booking information’s (in my case: name, second name & email,…) are exported in the detail-field of the ical-event.

    This data is not just available unauthorized for everybody on the internet who has the ical-url but also shared to 3-th parties like airbnb, booking.com etc. since this is probably one of the main task of this plugin for most users.

    I would like to see this fixed and the plugin not leaking personal data anymore.
    I also think (but I’m not a law expert) that this behavior violates EU-Law.

    I hope this is the right place for this.
    Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author wpdevelop

    (@wpdevelop)

    6 years, 8 months ago

    Hello.
    The purpose of this plugin to export the exist bookings into the .ics feeds.
    But its good point, to disable showing there any data and export only the dates.
    We will add this option to the next update of plugin.
    Kind Regards.

    Plugin Author wpdevelop

    (@wpdevelop)

    6 years, 8 months ago

    Plugin updated.
    Please update your version of plugin to update 2.0.12.
    You can activate this option at the oPlugins Panel > General Settings page.
    Kind Regards.

    Thread Starter lgehr

    (@lgehr)

    6 years, 8 months ago

    Wow that was quick.
    Thank you very much.

    Just some follow up toughs from me:
    – As a privacy concerned person I would like to see this as the default option. Since then I can be more sure that my information is not shared with 3th-parties if I book my stay at a website powered by this plugin.
    – Maybe it would be nice to export two calenders per Resource at ‘Booking Calendar’-> Setting -> Export.
    One for internal usage (with personal information) and one to export to 3thparties.

    This way the plugin could prevent data leaking by mistake.

    Again thank you for the quick fix!
    Very Awesome.

    Plugin Author wpdevelop

    (@wpdevelop)

    6 years, 8 months ago

    Thank you for these suggestions.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Data leak in default settings’ is closed to new replies.