Because of spamers that keep coming to my site and sending post to members I need to lock down the security ASAP.

Whats needed

1. I need ONLY FRIENDS to be able to post on a members wall (journal) or send them a private message.

2. EVERYONE can see a members INFO tab, Unless the member changes their settings to "Friends Only"

Current settings

1. EVERYONE can post on a members wall (journal) or send them a private message even if they are not friends.

2. EVERYONE can see a members INFO tab, Unless the member changes their settings to "Friends Only"


Thanks

The settings for the Journal Tools are user specific and located on the My Settings -> Journal Features tab. The drop down lists should be set to Friends. The default values for these settings can be seen on the Journal page of the control panel, in the Journal Options section. There is also an option to reset all the current user settings to the default values.

The setting for incoming private messages is located on the My Settings -> Notifications tab. Who can send you messages should be set to Friends. There is a default setting for the Messaging on the Settings page of the control panel, called User Default Availability in the Messaging section.

Hi Ben,

I have made the changed settings for the incoming messages. However, when I test it. I'm still able to send a message to a member I'm not friends with.

Are you testing as a site administrator? If so, you would be able to send messages to all users, regardless of friendship status.