CiviCRM Community Forums (archive)

Hi there,

(As mentioned in last text) I'm setting up a profile that enables guests to sign up for our email lists.

Another thorny problem I am having.

If an anonymous user adds email lists to appear on, he will get an email asking for confirmation. That's as expected.

However if he changes his name. He doesn't get an email asking for confirmation.

So, theoretically a prankster could easily change another person's name to "Big Fat Idiot" (for example) without verification, with hilarious  consequences the next time we do a mailout using the firstname token.

Any suggestions on how to avoid this apart from just not taking names?

Sincerely,
Lal Krishna

profiles have an option to either "create" a new contact or "update" an existing contact on creation

This sounds hopeful, but I'm not seeing it. The nearest I see is "Update contact on a duplicate match?" but if I leave that unchecked it disallows creation of a new record where one already exists with the same name. Is this the one you refer to or is there a different setting I'm missing?

profiles have an option to either "create" a new contact or "update" an existing contact on creation. In your case you might always want to choose "update" for the profiles, and then do a regular merge of contacts in the DB

This sounds like a good approach. Thanks.

an issue for this is filed here: http://issues.civicrm.org/jira/browse/CRM-5134

Currently scheduled for 3.2, if we have extra resources / time, we'll pull this into 3.1. If you have the resources / development skills would be great to contribute code  to fix this. We can help you get started on IRC

lobo