CiviCRM Community Forums (archive)

Greetings,

I have created a custom profile for subscribers to edit their contact information and emailing preferences, which we include in a link in the bottom of all of our mailings:

http://<site root>/civicrm/profile/edit?reset=1&gid=N&id={contact.contact_id}&{contact.checksum}

It works beautifully, however, upon updating and saving their contact information, subscribers who click "Back to Listings" are presented with a listing of every contact in the database. I was under the impression that supplying the checksum would restrict access to a specific contact, but apparently that is not so.

Is there any way that I can craft a profile that does not allow "Back to Listings" functionality, or restricts it to the contact identified by the checksum?

Many thanks in advance.

also disable the permission:

profile listings and search

for auth users. (assuming this is drupal)

the auth user just needs: profile create/edit/view permissions

lobo