# Can mods and admins view PMs sent between posters?

**URL:** <https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655>\
**Category:** About This Message Board\
**Created:** [April 10, 2009, 4:01pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655 "2009-04-10T16:01:13Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![NineToTheSky](https://avatars.discourse-cdn.com/v4/letter/n/b5a626/32.png) [@NineToTheSky](https://boards.straightdope.com/u/NineToTheSky)\
**Post date:** [April 10, 2009, 4:01pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/1 "2009-04-10T16:01:13Z")

</div>

Just out of idle curiosity, can mods and admins view PMs sent between posters?

---

<div class="post-metadata">

**Author:** ![Idle\_Thoughts](https://avatars.discourse-cdn.com/v4/letter/i/838e76/32.png) [@Idle\_Thoughts](https://boards.straightdope.com/u/Idle_Thoughts)\
**Post date:** [April 10, 2009, 4:33pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/2 "2009-04-10T16:33:35Z")

</div>

Short answer: No

Longer answer: No, however (being an admin on another VB board), an admin could, technically, change your password and then (knowing your password) log in to your account and look. But I wouldn’t worry about that. : p

Second longer answer: A friend of mine who was very good with technical stuff and who also ran a VB board told me that he found a script that allowed him read other people’s PMs on his board. Other members (friends of his) confirmed this was true…however I had my doubts and, personally, I don’t think such a script exists. If it does:

1. I doubt the admins of the SDMB would ever do this and
2. It would probably take ages to write

Either way, I wouldn’t worry about it. Because as is, there is aboslutely no way any admin or mod can read anything in your PM box without majorly/drastically changing something that you’d notice (I.E. password–by the way, if an admin ever changed that, you’d know, because it logs you out).

---

<div class="post-metadata">

**Author:** ![elmwood](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/elmwood/32/3060_2.png) [@elmwood](https://boards.straightdope.com/u/elmwood)\
**Post date:** [April 10, 2009, 4:50pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/3 "2009-04-10T16:50:31Z")

</div>

Yes, such a script exists.

However, there’s a lot of debate on the VB mods site about the ethical implications of the mod.

Private messages are in plain text in the raw MySQL database. Mods and admins whouldn’t have easy access to them without a hack. Someone with access to the database will be able to see PMs, but they’d have to use a MySQL database editor or utility.

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [April 10, 2009, 5:04pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/4 "2009-04-10T17:04:26Z")

</div>

> [@Idle\_Thoughts](#):
>
> 1. It would probably take ages to write

Please. I could do it in ten minutes. It’s nothing more than a few lines of PHP wrapped around an SQL query.

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 10, 2009, 5:06pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/5 "2009-04-10T17:06:57Z")

</div>

If you have access to the MySQL command line it is trivially easy to read PMs, by at least two different methods I can think of offhand - I’m not sure why this gets shrouded in mystery on some message boards. And you can write a PHP script that automates it for you in about 2 minutes. I wrote such a script for my message board (and I’ve told all the Members since Day 1 in writing that the Board Admin may be required to read PMs in the event of a serious breach of the rules).

While I am not on the this message board’s staff, the SDMB Staff have said numerous times in the past that they do not have MySQL access nor a script pre-written to read PMs.

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 10, 2009, 5:08pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/6 "2009-04-10T17:08:16Z")

</div>

> [@Q.E.D](#):
>
> Please. I could do it in ten minutes. It’s nothing more than a few lines of PHP wrapped around an SQL query.

Honestly, I was typing my message when you posted yours…odd how we both posted on the same thing.

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 10, 2009, 5:12pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/7 "2009-04-10T17:12:26Z")

</div>

> [@Idle\_Thoughts](#):
>
> Either way, I wouldn’t worry about it. Because as is, there is aboslutely no way any admin or mod can read anything in your PM box without majorly/drastically changing something that you’d notice (I.E. password–by the way, if an admin ever changed that, you’d know, because it logs you out).

This is completely incorrect. Not only can I get around the password issue, I can get around the logout issue as well.

---

<div class="post-metadata">

**Author:** ![brownie55](https://avatars.discourse-cdn.com/v4/letter/b/f14d63/32.png) [@brownie55](https://boards.straightdope.com/u/brownie55)\
**Post date:** [April 10, 2009, 5:29pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/8 "2009-04-10T17:29:07Z")

</div>

> [@Una\_Persson](#):
>
> Honestly, I was typing my message when you posted yours…odd how we both posted on the same thing.

Yeah, but you claim to be five times better than him.

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [April 10, 2009, 5:35pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/9 "2009-04-10T17:35:02Z")

</div>

Well, I test stuff before launching it. In case, y’know, I fucked up and crash the board. Not that that’s ever happened to me. No, of course not.

---

<div class="post-metadata">

**Author:** ![NineToTheSky](https://avatars.discourse-cdn.com/v4/letter/n/b5a626/32.png) [@NineToTheSky](https://boards.straightdope.com/u/NineToTheSky)\
**Post date:** [April 10, 2009, 5:36pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/10 "2009-04-10T17:36:05Z")

</div>

I just want to add that I’ve never PMed anything that I would mind a mod seeing - honest!

(That would go in an email :p)

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 10, 2009, 5:47pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/11 "2009-04-10T17:47:47Z")

</div>

> [@brownie55](#):
>
> Yeah, but you claim to be five times better than him.

Well, I have Fierra to help me, who IRL is a hard-core DBA who’s forgotten more about databases than I’ve ever learned. In any event, 2 minutes was hyperbole anyhow, as it sometimes takes longer than that just for my stupid computer to come back from hibernation (not to mention going through 5 levels of passwords and security just to upload the stupid script). IRL it probably is closer to the 10 minutes Q.E.D. said. Long story short:

- it’s still a trivial effort.
- the SDMB Staff have said in the past that they do not and can not read PMs and have no desire to ever do so, and I trust them absolutely.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [April 10, 2009, 6:08pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/12 "2009-04-10T18:08:48Z")

</div>

The Straight Dope moderation and administrative staff cannot see PMs not specifically sent to them.

We have no need and certainly no desire to eavesdrop on the private communications of others.

---

<div class="post-metadata">

**Author:** ![Idle\_Thoughts](https://avatars.discourse-cdn.com/v4/letter/i/838e76/32.png) [@Idle\_Thoughts](https://boards.straightdope.com/u/Idle_Thoughts)\
**Post date:** [April 10, 2009, 7:29pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/13 "2009-04-10T19:29:09Z")

</div>

> [@Una\_Persson](#):
>
> This is completely incorrect. Not only can I get around the password issue, I can get around the logout issue as well.

It’s incorrect that an admin would have to change something drastically to read a PM **on this board**? Seems to me you said in your own post that the admins here don’t have MySQL access…

So begging my pardon if that means the only other way to do it would be to use the admin CP to change one’s password. I think I’d, at least, notice if my pass were changed. 😛

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [April 10, 2009, 7:34pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/14 "2009-04-10T19:34:48Z")

</div>

> [@Idle\_Thoughts](#):
>
> Seems to me you said in your own post that the admins here don’t have MySQL access…

At least one admin absolutely has SQL access. Jerry has to have it as a matter of course. Ed probably does, but I’m not sure he’d know what to do with it. Standard vB does have a MySQL control panel through which admins can query the DB. Access to this function can be granted or denied to individual admins. I don’t know if any other admins such as **TubaDiva** or **Dex** have access to it and again I’m not sure they’d know what to do with it anyway.

---

<div class="post-metadata">

**Author:** ![Polycarp](https://avatars.discourse-cdn.com/v4/letter/p/82dd89/32.png) [@Polycarp](https://boards.straightdope.com/u/Polycarp)\
**Post date:** [April 10, 2009, 8:19pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/15 "2009-04-10T20:19:35Z")

</div>

> [@Q.E.D](#):
>
> At least one admin absolutely has SQL access. Jerry has to have it as a matter of course. Ed probably does, but I’m not sure he’d know what to do with it. Standard vB does have a MySQL control panel through which admins can query the DB. Access to this function can be granted or denied to individual admins. I don’t know if any other admins such as **TubaDiva** or **Dex** have access to it and again I’m not sure they’d know what to do with it anyway.

And the reason for this is that Jerry has to be able to work in MySQL to fix problems with the DB. As noted, it’s technically possible, but unethical as all hell in most circumstances, and nobody wants the hassle in the third place. The one occasion it might be appropriate to do so is if there were reasonable grounds to suspect someone of carrying out illegal activities using the PM facility, the board management (meaning Ed and/or Jerry acting at his behest, or someone outranking him) might investigate to see if the allegations are in fact true. (Think the Stage Manager business some time back, where he was allegedly attempting to meet a minor Doper for sexual purposes – things like that.) Then and only then might the board go through the legal and ethical hassle of devising means to investigate someone’s PMs – they could care less what you think privately of Dex or Lynn.

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 10, 2009, 9:37pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/16 "2009-04-10T21:37:27Z")

</div>

> [@Idle\_Thoughts](#):
>
> It’s incorrect that an admin would have to change something drastically to read a PM **on this board**?

It’s not drastic from a tech standpoint.

> [@](#):
>
> I think I’d, at least, notice if my pass were changed. 😛

Not if I did it you wouldn’t, because I would change it back and alter your “last visited” times before you saw them…believe me, I don’t have any super-dooper skills at all; some things are just really easy if you know even basic SQL.

---

<div class="post-metadata">

**Author:** ![Idle\_Thoughts](https://avatars.discourse-cdn.com/v4/letter/i/838e76/32.png) [@Idle\_Thoughts](https://boards.straightdope.com/u/Idle_Thoughts)\
**Post date:** [April 11, 2009, 2:13am UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/17 "2009-04-11T02:13:16Z")

</div>

Yes, but we weren’t talking about your boards. 🙂

I have no doubt it can be done easly without a person’s knowledge, but most people who run boards don’t usually know about these things and, as it is, it’s a moot point anyway, it seems, haha.

---

<div class="post-metadata">

**Author:** ![Polycarp](https://avatars.discourse-cdn.com/v4/letter/p/82dd89/32.png) [@Polycarp](https://boards.straightdope.com/u/Polycarp)\
**Post date:** [April 11, 2009, 4:10pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/18 "2009-04-11T16:10:15Z")

</div>

> [@Idle\_Thoughts](#):
>
> Yes, but we weren’t talking about your boards. 🙂
> 
> I have no doubt it can be done easly without a person’s knowledge, but most people who run boards don’t usually know about these things and, as it is, it’s a moot point anyway, it seems, haha.

The point to **Una** ’s posts is that she and Fierra run a vBulletin-based board, and know what they’re talking about in regards of what is technically feasible. I don’t know **Ed Zotti** ’s technical competence – his job is something quite different, administrative rather than technical in nature, and he may or may not know how to make vBulletin sit up and beg for hamster chow or roll over and play dead. Jerry, on the other hand, does have technical competence, and probably avidly follows developments on the vBulletin administrators’ technical board. (Which is why I suggested some months back that Ed might be well advised to accept Una’s volunteer help, to give Jerry some reliable assistance at little or no cost to the Reader/CL.)

But agreed that it’s still a moot point.

---

<div class="post-metadata">

**Author:** ![brownie55](https://avatars.discourse-cdn.com/v4/letter/b/f14d63/32.png) [@brownie55](https://boards.straightdope.com/u/brownie55)\
**Post date:** [April 11, 2009, 4:17pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/19 "2009-04-11T16:17:58Z")

</div>

> [@Una\_Persson](#):
>
> Well, I have Fierra to help me, who IRL is a hard-core DBA who’s forgotten more about databases than I’ve ever learned. In any event, 2 minutes was hyperbole anyhow, as it sometimes takes longer than that just for my stupid computer to come back from hibernation (not to mention going through 5 levels of passwords and security just to upload the stupid script). IRL it probably is closer to the 10 minutes Q.E.D. said. Long story short:
> 
> - it’s still a trivial effort.
> - the SDMB Staff have said in the past that they do not and can not read PMs and have no desire to ever do so, and I trust them absolutely.

I am sorry you took my post that way. I agree that you were both indicating the effort was indeed trivial. The use of the winky smiley there would have helped get my point across.

> [@Polycarp](#):
>
> The point to **Una** ’s posts is that she and Fierra run a vBulletin-based board, and know what they’re talking about in regards of what is technically feasible. \*\*I don’t know **Ed Zotti** ’s technical competence – his job is something quite different, administrative rather than technical in nature, and he may or may not know how to make vBulletin sit up and beg for hamster chow or roll over and play dead. \*\* Jerry, on the other hand, does have technical competence, and probably avidly follows developments on the vBulletin administrators’ technical board. (Which is why I suggested some months back that Ed might be well advised to accept Una’s volunteer help, to give Jerry some reliable assistance at little or no cost to the Reader/CL.)
> 
> But agreed that it’s still a moot point.

Well, we can be sure they know how to make the boards roll over and play dead. 😉

---

<div class="post-metadata">

**Author:** ![Una\_Persson](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/una_persson/32/346_2.png) [@Una\_Persson](https://boards.straightdope.com/u/Una_Persson)\
**Post date:** [April 11, 2009, 4:45pm UTC](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655/20 "2009-04-11T16:45:50Z")

</div>

> [@brownie55](#):
>
> I am sorry you took my post that way. I agree that you were both indicating the effort was indeed trivial. The use of the winky smiley there would have helped get my point across.

No, we’re on the same channel - I assumed you were making a small joke, and took no umbrage whatsoever.

[Next page](https://boards.straightdope.com/t/can-mods-and-admins-view-pms-sent-between-posters/492655.md?page=2)
