[9ine]

It's a pretty good idea.
Will stop people bullshitting to win scam disputes.

[Ivy Mike]

How would this work exactly? What if a PM is deleted, but they still have the ID? Will the function still work as the PM is deleted, and say its deleted from both ends, wheres the record then?

[DotPSD]

This idea will probably be denied. Staff can see your PM's and thus they can check If the PM exists or not. It's a decent idea but not that practical.

Thing is, staff rarely if never. I've never seen it happen in the 9 months or so I've been on HackForums.

I like this idea, hope it goes in or maybe switched around for better security.

[Sedo]

This is a really good idea and nice thought but staff can see your pms anyway.

[rudeman]

Eh, it's just easier to take a screenshot, cus im sure theres some parts of the PM that you don't want showing.

[STR™]

If this idea can work , this will be a awesome suggestion

[Sagax]

This is excellent.
I really hope something like this gets implemented.

['An0ny]

How would this work exactly? What if a PM is deleted, but they still have the ID? Will the function still work as the PM is deleted, and say its deleted from both ends, wheres the record then?

If you delete the PM yourself then thats your issue. Omni can't backup each single PM.

The other participater can't delete it though, as the ID is different.

Also this would be quiet hard to do, it would have security so people couldn't post anyone's ID and revail their conversation :P

Doubtfull it'll get accepted. I rather see 3P1C features than this being added lol

[Programming]

How would this work exactly? What if a PM is deleted, but they still have the ID? Will the function still work as the PM is deleted, and say its deleted from both ends, wheres the record then?

They aren't deleted from the HF DB lol

---

Mmmm no. Think about what goes on in transactions. What if 2 parties are in mid-transaction and one goes off before the deal and the Moneypak code, credentials to that insanely OG account, 1 year subscription to X, or whatever is just sitting there and some guy goes hunting with random digits in the PMID tags to find this code. Next thing you know, 2 monster threads surface on deal disputes and the lucky thief gets away scot-free.

It would lock so you have to be in the convorsation as a UID.

[Zetonix]

Lalit Agarwal is right this idea can't be accepted as people can read others PMs by just typing random numbers!
It is a good idea if only staff can see PMs by PM id!
Good luck!

[Trundle™]

This idea will probably be denied. Staff can see your PM's and thus they can check If the PM exists or not. It's a decent idea but not that practical.

Staff doesn't really care about scam reports that much and with so many active members it's hard.

---

Lalit Agarwal is right this idea can't be accepted as people can read others PMs by just typing random numbers!
It is a good idea if only staff can see PMs by PM id!
Good luck!

Fixed by SUCH a simple code.
Just allow it to determine which PM belongs to you.

[Bro?]

I was about to say if you are honestly too lazy to screenshot it, then just stop.

But then I realized that people can inspect element.
Vouch for this

[Robust]

Could be done but here is the problems I forsee.

1. If account is stolen it can have all their PMs public posted.
2. Security on this would require some serious coding. Even the smallest mistake could expose a huge security risk to all members.
3. The only way to make 100% sure that the posted PMID is embedded properly is to actually have it open as a popup BUT that creates serious risks in security.
4. Dox risk is enhanced and members are touchy feely on the subject.

While the concept is a decent enough one with good intent the implementation is dicey at best.

Yes, they are. I don't backup the PM table. I see no need. I really don't discuss it but it's the truth. If the sender and receiver delete a PM there is no record of it. The PM table is 5Gb and I don't see a lot of reason to back it up. If it's lost then it's lost. So deleting your PM does indeed the PM from HF DB. No backup.

I actually have thought about encrypting all PM convos. Just a thought.

1. Since the PM ID is needed the person using the stolen account will probably see the PM anyway. He can screenshot them if he needs to and simply post them that way. Sure it won't be verified, but the information is there nonetheless.
2. Yup. I'd imagine a lot of sensitive information is passed around these forums.
3. Pop-up is probably going to be the nicest
4. You could do something like what CloudFlare does, star out the email addresses automatically, any type of links etc. I mean, this isn't exactly the best for PM integrity but there only needs to be information of the scam, not exactly of every little bit of the trade. So that'd assist, starring out websites, emails and so on. Members could use a BB Code that would automatically hide content from this system, but that'd be an open road to scammers as well, and I'm not sure how many people would use it either.

Say a password is sent or something, there's not so much an easy way to detect that and then hide it. Perhaps a utility for the member to hide certain parts of the PM, but that can also be abused by hiding crucial information which changes the whole story in the dispute.

I can see so much potential abuse with this system. I don't see, at best, a decent implementation to prevent excessive abuse.

The idea is great, the implementation, not so much.

[Robust]

Assuming the plugin was final and 100% adequate...

If 2-step verification for accounts was up and running, then accounts, and PM's would be that much more secure 🤫

I think there's a lot of issues with implementation, use, having only the information there necessary for the trade and nothing personal (some deals could include sensitive information), and if one member can blank out parts that'll likely get abused in the retrospect that they'll just blank out anything that'd make the story change entirely.

['Snorlax]

I've gotta say.. This can be useful. It requires a ton of coding to create a MyBB-tag for that, such as checking if the user posting the post actually can read that PM.
I could see this being abused in other sections, but I'm not sure what you would abuse other than calling someone out.

On the other hand, I think it's a bad idea. What if you want to mask something out such as username/password? An Email? Name, address, etc?
I have posted some deal disputes with PMs including my personal information, but I had to screenshot the messages and edit them in Photoshop or Paint.

If you post a screenshot of PMs and the defendant says it has been tampered, you could always ask a staff member to confirm it. I've done that myself and I have seen others do it.