CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site

This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Standalone Profile Hijacks Logged in User
Pages: [1]

Author Topic: Standalone Profile Hijacks Logged in User  (Read 2181 times)

Denver Dave

  • Ask me questions
  • ****
  • Posts: 471
  • Karma: 9
Standalone Profile Hijacks Logged in User
December 14, 2007, 08:59:19 pm
It seems that adding a contact with the standalone form hijacks and changes the logged in user on the same pc and applies changes to this user even if all the values are different from the user.   Is this a bug or a feature? 

This happens even when the form used is not set for user registration or user editing.  Also happens if the user has closed their window, but not logged off.

Fortunately, the issue seems to only be when the standalone form is used from the pc that was logged on.

This is a problem for testing of standalone forms and doing data entry using the form.  Is there an option to turn the automatic hijack off or at least issue a warning message? 
« Last Edit: December 14, 2007, 09:45:24 pm by Denver Dave »

Tachikoma

  • Guest
Re: Standalone Profile Hijacks Logged in User
December 17, 2007, 03:57:11 pm
Hi Dave,

What is the standalone version?

Denver Dave

  • Ask me questions
  • ****
  • Posts: 471
  • Karma: 9
Re: Standalone Profile Hijacks Logged in User
December 17, 2007, 04:55:54 pm
One of the really neat features of CiviCRM is that we can create our own display and input form formats called profiles.  Administer CiviCRM / Configure / CiviCRM Profile

In each profile administration, there is an option to create standalone forms that can be placed on any web page anyplace with the form action being to go to your CiviCRM installation.

There may be interesting issues, like protecting against spam, tailoring the defaults to what you want, tweaking the look.  What is great though is that new contacts can enter themselves.  I have the contacts enter themselves in a new group for review and this might could be circumvented, but could save a lot of time.

We may also use the custom profile as a data entry form - however, be sure not to use the form from a computer that you are logged in on, or CiviCRM thinks you are trying to change the info for the logged in user - really - and I know know how to stop this - thus my post.

I welcome the chance to hear how others are using standalone forms.
« Last Edit: December 17, 2007, 04:57:53 pm by Denver Dave »

Tachikoma

  • Guest
Re: Standalone Profile Hijacks Logged in User
December 17, 2007, 05:12:31 pm
Yeah Dave, this is great stuff...

I just found the link the get my standalone HTML, its awesome!.

But, All I can see is what I call "Basic Data" from the contacts list. How do I make a standalone form for the activity per contact?

I'd like to be able to search for contact, then have a form which lets me edit contact information (any updates/changes) and add a new phonecall log, or somethign like that.

How can I accomplish this? What's my first step?

Thanks Dave!

Denver Dave

  • Ask me questions
  • ****
  • Posts: 471
  • Karma: 9
Re: Standalone Profile Hijacks Logged in User
July 21, 2009, 11:45:20 pm
I'm revisiting why were not able to use standalone forms to capture new contact information rather than entering the data manually.  We are currently running version 1.9 and I confirmed that at least with the 1.9 version that this issue originally reported in fall of 2007 still is an issue.

The standalone profile form works fine if we are not logged into CiviCRM and can use the form for data input.  Normally the person entering the contact information would be new and not be a CiviCRM user, however, if we use it for data entry and the user is logged in, even if the CiviCRM window has been closed, entering a new contact's information changes the contact information for the logged in user.

I haven't tested this problem with later versions yet.

Dave

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Standalone Profile Hijacks Logged in User
July 22, 2009, 06:47:14 am

to create a new user make sure the action is

civicrm/profile/create

i think by default the standalone form's action is

civicrm/profile/edit

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

Denver Dave

  • Ask me questions
  • ****
  • Posts: 471
  • Karma: 9
Re: Standalone Profile Hijacks Logged in User
February 04, 2010, 11:46:35 pm
I'm happy to report that the issue I had with the stand-alone form hijacking the logged in user's information with version 1.9, does not seem to be an issue with 3.1 that I'm testing.

Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • Standalone Profile Hijacks Logged in User

This forum was archived on 2017-11-26.