CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM (Moderator: Dave Greenberg) »
  • CiviCRM External User Access
Pages: [1]

Author Topic: CiviCRM External User Access  (Read 696 times)

scitechscott

  • I’m new here
  • *
  • Posts: 1
  • Karma: 0
  • CiviCRM version: 2.2.5
  • CMS version: Joomla 1.5.10
  • MySQL version: not sure
  • PHP version: not sure
CiviCRM External User Access
February 08, 2011, 09:59:09 am
Hello all,

We have CiviCRM installed on our web site but we have not enabled any of the external access features.  (No User Dashboard or anything like that).  However the other day we were cleaning our database and found a user record edited by the user themselves.  As far as we knew that wasn't possible.  Can someone point me to possible locations where an end-user could access their record from the Joomla side of things?

Thanks,
Scott

Dave Greenberg

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 5760
  • Karma: 226
    • My CiviCRM Blog
Re: CiviCRM External User Access
February 08, 2011, 02:46:44 pm
Are you referring to editing fields in their CiviCRM "contact record" or editing their Joomla "user record"? If they've modified their "contact" record - then a few possible scenarios:

1. If you've put up some front-end forms for online contributions or online event registrations - the data you're collecting will result in either a new contact record created OR an existing record updated (via duplicate match on email address - by default).

2. If you have create CiviCRM Profile(s) - and have marked them as Used For = Profile in their settings, AND have fields w/ Public Visibility - then an anonymous user can potentially access a URL pattern like this which provides a "create contact" form w/ the fields configured in your profile:
http://<your site>/index.php?option=com_civicrm&task=civicrm/profile/create&gid=1&reset=1

... and if the data they enter matches an existing user (i.e. same email address) - other fields will get updated.
Protect your investment in CiviCRM by  becoming a Member!
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM (Moderator: Dave Greenberg) »
  • CiviCRM External User Access

This forum was archived on 2017-11-26.