Customising user login pages so others can't view them

I’m new to S2 and it seems perfect, but for one problem.

For what I’m trying to set up, when users log in, they will all need their own login page. For information I’ve been using this page: https://s2member.com/kb-article/customizing-your-login-welcome-page/

I’ve found the bit about “Using A Special Redirection URL — Dynamic Login Welcome Page(s)” and am looking at basing it on username. So…

http://www.example.com/%%current_user_login%%-account-page

…could create pages called…

http://www.example.com/julesbrown-account-page
http://www.example.com/chrisjones-account-page
http://www.example.com/patsmith-account-page

…and so on, for each username.

The trouble is from this is that once you are logged in, there doesn’t seem to be a way of you being able to stop people reading the other users’ pages if you could guess the URL. So if you can see that the URL uses your username (which is what I want), if they guess another user name, they would be able to read it.

The reason it matters is the group who will be using it would all know each others names. So when they see their own name, they could swap it could for someone else’s name and read their “personal” homepage.

I’m sure I must be doing something REALLY wrong here as I can’t believe this is possible.

HELP!

For that you’d need to give each a unique custom capability (ccap), and protect each personal user page with his corresponding ccap.

See this video: https://www.youtube.com/watch?v=BBltDUopo1U

I hope that helps. :slight_smile: