[Vtigercrm-commits] [vtiger development] #5860: 5.0.1.webforms needs a re-think

[vtiger development]

#5860: 5.0.1.webforms needs a re-think
-----------------------------+----------------------------------------------
  Reporter:  Ed.Taaffe       |       Owner:  developer 
      Type:  Need More Info  |      Status:  new       
  Priority:  unassigned      |   Milestone:  5.1.0     
 Component:  vtigercrm       |     Version:  5.1.0-val1
Resolution:                  |    Keywords:            
-----------------------------+----------------------------------------------
Changes (by prasad):

  * type:  defect => Need More Info

Comment:

 We have fixed few issues related to Webforms module in 5.1.0-validation2
 build

 Once you install Webforms module, you will need to update
 modules/Webforms/Webforms.config.php

 $defaultUserName = 'USERNAME';
 $defaultUserAccessKey = 'USER_ACCESS_KEY_HERE';

 We have introduced validation check:
 {{{
 $enableAppKeyValidation = true;
 }}}

 $appKey is expected to be sent by the client which matches your
 $application_unique_key value (defined in your config.inc.php) which
 varies based on the installation.

 Would like to share how to make the webform secure:

 1. Have vtiger CRM installed on server (http://en.vtiger.com/wip) with
 $enableAppKeyValidation set to true.

 2. Have your website (http://yoursite.com) collect data from the client
 using a form.

 3. Post client input along with $appKey from http://yoursite.com to
 http://en.vtiger.com/wip Webforms

 Let me know your feedback.

 Regards,
 Prasad
 vtiger Team

-- 
Ticket URL: <http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5860#comment:1>
vtiger development <http://trac.vtiger.com/>
vtigerCRM