The following warnings occurred: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Warning [2] Undefined array key "avatartype" - Line: 783 - File: global.php PHP 8.1.31 (Linux)
|
![]() |
External Form Security - Printable Version +- Form Tools (https://forums.formtools.org) +-- Forum: Form Tools (https://forums.formtools.org/forumdisplay.php?fid=1) +--- Forum: API (https://forums.formtools.org/forumdisplay.php?fid=17) +--- Thread: External Form Security (/showthread.php?tid=19868) |
External Form Security - Sir-Win - Jan 15th, 2017 Hi all, First post for me, and I begin by saying that FormTools is brilliant! One slight concern I have, though I will be happy to admit if this is an error on my part is that when using external forms I cannot seem to get my one external form to stick to the access policy defined when setting up the form. At the moment anyone and everyone (including not logged in) can access my external form even when the form is set to Adminstrator Only access. I have searched the forum for a fix to this but cannot find anything. Can someone suggest a solution to this? Many thanks in advance. RE: External Form Security - alexh - Jan 15th, 2017 The security that you are referring to only limits other logged-in users from viewing the form results, not the actual form. Are you only allowing FormTools user accounts to fill out your form? RE: External Form Security - Sir-Win - Jan 15th, 2017 Thanks for the reply Alex. Yes the aim is for only formtools users to be able to access the form. Is there any coding that can be done to make a form abide by formtools internal form access policies? Thanks again Steve RE: External Form Security - alexh - Jan 16th, 2017 I think I did something similar by checking to see if the user was logged in in order to view a page. It was generic though and did not check to see if that user had rights to view the specific form. It's definitely possible but will involve some custom code. Sorry I couldn't be of more help! RE: External Form Security - Sir-Win - Jan 16th, 2017 Hi Alex, Again thank you for your response, what you suggest seems perfectly acceptable to me as login-check to access the form keeps the entire internet out and avoids a dual login system. Can you point me in the right direction with code? Thanks in advance Steve RE: External Form Security - alexh - Jan 17th, 2017 Sorry for the late reply, its been a busy few days for me! I haven't been able to dig up the code I wrote for that. I know I saved it somewhere.. just cant remember where :-) Check out the /global/code/accounts.php file. There you will find lots of well commented login related code. |