There are a few things with the user export function that can be improved.
My ideas are:
The export is located under "FRAB import and export". FRAB is a system to manage events and has nothing to do with users. Restore this to "Frab import" and locate the export button on top of the users list (users_list_controller() and Users_view()).
The export writes a file to the file system. This can lead to problems because not all environments allow this and because userdata including hashes is written to the filesystems tmp dir - and every server user can read this.
Exclude password hashes from export!
Make sure to put CSV content into a .csv file (not .xls) - I think this is already fixed.
Move the code to a users_export function in the users_controller.php for this feature
There are a few things with the user export function that can be improved.
My ideas are:
users_list_controller()
andUsers_view()
).users_export
function in theusers_controller.php
for this feature