Stop recording IP address of registrants

Hi,

how can I stop recording the IP address of registrants or disable it ... because of rules from data protection in our country, we are not allowed to record the full IP of registrants ...

Could you please at least help me out to stop record IP and disable it ... were can I find it in a file to delete the code snippet?

thanks,

Soeren

Tuan should maybe add a toggle switch for "Enable GDPR Compliance" and include this as one of the things it controls.

To remove it yourself, edit /administrator/components/com_eventbooking/view/registrant/tmpl/default.php, and remove the block (either around line 403 or 805 if double-spaced) that reads:
Then save the changed php file to PATH_TO_TEMPLATE/html/com_eventbooking/registrant/ folder so that the change won't be lost when you update to future releases of the extension.

FYI: The way I found the code was by searching the EB Translation manager for "user ip", which gave me the key "EB_USER_IP". I then searched the EB Administrator source code for "EB_USER_IP" and discovered the right file and section of code

Hi James

That modification just remove the IP from being displayed to registrant, infact, it is still being stored in database, so might not legal, correct?

So not storing user IP is one of requirement or GDPR ? If Yes, then we should add a config option to disable storing IP

Let me know

Regards,

Tuan

Hi James,

thanks for the informations ans helping out and showing how you found the code, that will help to find things in future thankyou

Blessings,

Soeren

Hi Tuan,

thanks for the informations yes if it is still being stored in database that would not be legal correct ... the solution you said "we should add a config option to disable storing IP" that would be great, because the problem is that "IP addresses are specifically defined as personal data" and thats not legal for me and others ... GDPR - we have to be ready for 25th May 2018 ... could you implement the option disable storing IP?

Blessings,

Soeren

You can use it now. Access to My Downloads menu item, download latest package, update it to your site. Then go to Events Booking -> Configuration, set Store User IP config option to No and it will work as expected

Regards,

Tuan

Oops! I guess I didn't dig far enough
If the new config option is turned on, will it also delete the already stored IP info so that old data is in compliance with GDRP?

No, it doesn't. But we also don't show the already stored ip at the backend anymore

Tuan

The GDPR (General Data Protection Regulation) doesn't forbid the storing of IPs. If you sell products online, offer contact forms, allow users commenting or to registrate you can store personal data like name, address, ip and so on. But you must inform the user which data are stored in which way and what you will do with this.

If you offer event registration, whether free of charge or in return for payment, I recommend you the storage of the IP. All other infos by the user can be faked, if he has access to an valid email. Only in combination of the ip and the time stamp you can protect your event booking against fraud. If you know the IP and the time stamp you can identify in case of fraud with the support of the ISP the physical user.

IMPORTANT: TO STORE THE FULL IP IN THE DATABASE AND ONLY NOT TO DISPLAY IS NO ALTERNATIVE FOR ANONYMIZATION. IN THIS CASE YOU MUST INFORM THE USER AS DESCRIBED ABOVE.

A more better solution for all cases of identified and anonymous registration would be to implement a feature that allows you the anonymization of IPs. My suggestion is to do it in this way:

Select, how many bytes of the visitor ip should be masked:
1-byte(s), e.g. 192.168.100.xxx
2-byte(s), e.g. 192.168.xxx.xxx
3-byte(s), e.g. 192.xxx.xxx.xxx

Select, if geolaocation should use masked or full ip:
masked ip
full ip

Best regards,
Jürgen