Hi,
However, once they're registered and they go in to their profile - these answers are fully open to see. Ordinarily this may not seem much of an issue but it can be for sure.
you can simply not show these fields in profile page. Admins can continue to see these from Backend.
I am wondering if there's any known way that can work with EasyProfile to have these specific fields retain the answers given by the end users for super admins to see but in the end users profiles, these specific fields are replaced with ******* asterisk characters to further aid security of such critical account security question answers?
There are many ways to do this, and all complex.
for example, instead show fields directly you can use delimiter field type with some Content Plugin like Sourcerer (
https://www.regularlabs.com/extensions/sourcerer).
You can put in delimiter some code like this:
{source}
<?php
$owner_id=JFactory::getApplication()->input->get('id',JFactory::getUser()->id); // ID of owner of profile page
$owner=JsnHelper::getUser($owner_id);
$visitor_id=JFactory::getUser()->id;
$visitor=JsnHelper::getUser($visitor_id);
/* CODE TO CHECK IF VISITOR IS ADMIN */
if($is_admin){
echo $owner->getField('field_alias_of_security_question');
}
else{
echo '*****';
}
?>
{/source}
Docs about our User Object at
http://docs.easy-profile.com/index.php/article/jsnuser-object
NOTE: this code is not tested and not supported, this is only for example purpose, you need to have PHP and Joomla devs knowledges.