Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListHidden fields in sending a copy of the webformHidden fields in sending a copy of the webform
Previous
 
Next
New Post
4/8/2011 12:13 PM
 
We have a form n list which gathers sensitive data.
Our webform itself is secure (https),
but we send a copy of the form to the user who submits the form.

my question is - when we send a copy of the form back to the user - is this secure?
- and if not, can we hide any fields in any way when sending a copy of their form back to them?

thanks in advance,
mark.
 
New Post
4/9/2011 5:38 AM
 
email is never secure - besides, you may check in source code of the mail, whether hidden fields are included.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
4/9/2011 6:50 AM
 
You can control the content of the email using XSLT instead of the default "auto" approach.
 
New Post
4/12/2011 12:50 PM
 
Thanks for the replies...
1. How do I check the source code of the mail?
anyway - would this enable us to receive different fields (more fields) than the user who completed the form?

2.  I have tried the XSLT approach, but not sure how to amend the script so that the user does not recieve all the fields?

I can remove a field from the list, but this is removed for BOTH the recipient (user who sent the form) and ourselves - and we would still like to view ALL fields submitted.

e.g. our code is below:
HTML
<code>

<style type="text/css">
.normal, .normalBold {font-family: Verdana, Tahoma, Arial, Helvetica;font-size: 11px;font-weight: normal;}
.normalBold{font-weight: bold;}
</style>
<table>
  <tr>
    <td class="normalBold">First name</td>
    <td class="Normal">[First name]</td>
  </tr>
  <tr>
    <td class="normalBold">Last name</td>
    <td class="Normal">[Last name]</td>
  </tr>

  <tr>
    <td class="normalBold">Email</td>
    <td class="Normal">[Email]</td>
  </tr>
  <tr>
    <td class="normalBold">Telephone number</td>
    <td class="Normal">[Telephone number]</td>
  </tr>
  <tr>
    <td class="normalBold">Created by</td>
    <td class="Normal">[Created by]</td>
  </tr>
  <tr>
    <td class="normalBold">Created at</td>
    <td class="Normal">[Created at_UDT_Value]</td>
  </tr>
  <tr>
    <td class="normalBold">Changed by</td>
    <td class="Normal">[Changed by]</td>
  </tr>
  <tr>
    <td class="normalBold">Changed at</td>
    <td class="Normal">[Changed at_UDT_Value]</td>
  </tr>
</table>

</code>


XSLT
<code>

<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:udt="DotNetNuke/UserDefinedTable" exclude-result-prefixes="udt">
  <xsl:output method="xml" indent="yes" omit-xml-declaration="yes" />
  <!--
  This prefix is used to generate module specific query strings
  Each querystring or form value that starts with udt_{ModuleId}_param
  will be added as parameter starting with param
  -->
  <xsl:variable name="prefix_param">udt_<xsl:value-of select="//udt:Context/udt:ModuleId" />_param</xsl:variable>

  <xsl:template match="udt:Data" mode="list">
    <style type="text/css">
.normal, .normalBold {font-family: Verdana, Tahoma, Arial, Helvetica;font-size: 11px;font-weight: normal;}
.normalBold{font-weight: bold;}
</style>
    <table>
      <tr>
        <td class="normalBold">First name</td>
        <td class="Normal">
          <xsl:value-of select="udt:First_x0020_name" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Last name</td>
        <td class="Normal">
          <xsl:value-of select="udt:Last_x0020_name" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Email</td>
        <td class="Normal">
          <xsl:value-of select="udt:Email" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Telephone number</td>
        <td class="Normal">
          <xsl:value-of select="udt:Telephone_x0020_number" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Created by</td>
        <td class="Normal">
          <xsl:value-of select="udt:Created_x0020_by" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Created at</td>
        <td class="Normal">
          <xsl:value-of select="udt:Created_x0020_at_UDT_Value" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Changed by</td>
        <td class="Normal">
          <xsl:value-of select="udt:Changed_x0020_by" disable-output-escaping="yes" />
        </td>
      </tr>
      <tr>
        <td class="normalBold">Changed at</td>
        <td class="Normal">
          <xsl:value-of select="udt:Changed_x0020_at_UDT_Value" disable-output-escaping="yes" />
        </td>
      </tr>
    </table>
  </xsl:template>

  <xsl:template match="/udt:UserDefinedTable">
    <xsl:variable name="currentData" select="udt:Data" />
    <xsl:if test="$currentData">
      <xsl:apply-templates select="$currentData" mode="list">
      </xsl:apply-templates>
    </xsl:if>
  </xsl:template>

  <xsl:template name="EditLink">
    <xsl:if test="udt:EditLink">
      <a href="{udt:EditLink}">
        <img border="0" alt="edit" src="{//udt:Context/udt:ApplicationPath}/images/edit.gif" />
      </a>
    </xsl:if>
  </xsl:template>
</xsl:stylesheet>

</code>

p.s
using form and list v5.1 (due to using DNN v5.1.1 and framework 3.5)
 
New Post
4/15/2011 5:50 AM
 
I just want to clarify my question here (as I am not sure if it is possible):

WE have a Form and List webform - which the user submits to us, which includes sensitive data - like (like a social security number).

We do NOT want the user to see this field when they get an auto-reply (as it's not secure).

But, we DO want to receive a copy of all the fields.

(Not sure if XSLT will do this?)

The only other way I can think of;
is to hide the field for BOTH them and us and then create a SQL job which crawls the Form and List user defined data and sends us this data manually.
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsForm and ListForm and ListHidden fields in sending a copy of the webformHidden fields in sending a copy of the webform


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out