delete_private_data() does not delete all private data

[pavlos256@…]

1. 'text_search_data' is not cleared and exposes the login name

2. Does not clear the table 'member_history'

3. Does not clear the 'identification' field

4. Should probably change or hide the 'name' field. Either replace it with a random string or by some a hash like hash(id+login+name).

[jbe]

1) "text_search_data" is partially cleared by "delete_private_data"() because of triggers (see line 4417 in v2.0.11 of core.sql). Beside that, it never contains the login name (see lines 132 to 137 in v2.0.11 of core.sql).

2), 3) and 4) A database dump shall be suitable to verify the results of the system. It is thus neccessary to identify the members. The fields "name", "member_history" and "identification" (as well as "authentication") are NOT cleared. This is intended. If you do need another behaviour, you may create a different function and modify lf_export accordingly.

Note that LiquidFeedback is not designed to provide anonymous voting.