5 results found

1. Automate SSL Certificate

   LET'S ENCRYPT SSL Certificate should be part of the Custom Domain Mapping process.

   There is no reason for this not to be automated. The concept of having to send an email when their API is so simple feels like the Web early-2000's ;-)

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Resolved  ·  AdminKatya Tyukina (Director of Product Management, Wild Apricot by Personify) responded

   The order and renewal process was automated. See details https://gethelp.wildapricot.com/en/articles/555

2. Better Anti-spam Defence (reCAPTCHA)

   Better captcha for comments to remove spam

   20 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   20 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Resolved  ·  AdminKatya Tyukina (Director of Product Management, Wild Apricot by Personify) responded

   With version 7.17 The Captcha was updated to reCAPTCHA for security checks on all forms, where enabled.

   See more about version 7.17: https://gethelp.wildapricot.com/en/articles/1750-version-7-17-release

3. Implement Let's Encrypt

   Wild Apricot should implement Let's Encrypt's new free SSL certificates for all paid accounts with custom domains by default. Perhaps the technology is already compatible, but the process seems to be very different from just emailing the WA tech support a certificate.

   49 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   32 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Resolved  ·  Evgeny Zaritovskiy responded

   Please see our help article on how to use Let’s Encrypt to get SSL certificated installed for your custom domain for free – https://gethelp.wildapricot.com/en/articles/555

4. Restrict access to files for different admin roles

   Well I'm going to be announcing our new site to our organization this week. We're going with the community plan so that each of 12 teams will have their own page that they will manage. Many are low tech (like looking for the "any" key). I pushed to get the community plan so that we could do this. I loved the feature that you can give access to one page to one person or group. Ultimately I'd like each user to be able to have their own page if they want.

   I created an account and gave admin access to 1 page, looked great. I didn't have to worry about non-tech users messing up the rest of the site, I thought. I was thrilled. Then I went to settings and saw that file management was accessable. I uploaded a file under my full admin account then went in and successfully deleted it under the restricted admin account. Not cool.

   I don’t get it, how could you allow a restricted access to the files of the whole site? This to me defeats the purpose of such restriction. I now have to rethink how we handle this. Please consider an option to turn off file management for restricted access admins or at least prevent them from deleting , renaming or moving files as the original poster asked.

   This is the one main feature why will be going for the community over group plan. I'm responsible for the whole site and I don't like the idea of dozens of low tech users possibly munging up things and I without audit trails I won't even be able to figure out who did it.

   Well I'm going to be announcing our new site to our organization this week. We're going with the community plan so that each of 12 teams will have their own page that they will manage. Many are low tech (like looking for the "any" key). I pushed to get the community plan so that we could do this. I loved the feature that you can give access to one page to one person or group. Ultimately I'd like each user to be able to have their own page if they want.

   I created an account and gave admin access to… more

   16 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   13 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Resolved  ·  AdminKatya Tyukina (Director of Product Management, Wild Apricot by Personify) responded

   In version 6.11 the deletion issue was solved.
   Limited administrators can now only delete files or folders that they have added themselves.

5. Enforce stronger member passwords

   When a password is generated by the application, it seems quite secure. However, when people change their passwords, they usually don't make them as secure as they should be. Is there a way to reject a new password if it isn't secure? Or provide a "meter" that shows just how secure their new password really is so that they can reevaluate their choice? I know of some Javascript coding for this purpose (http://javascript.internet.com/passwords ), but I'm not sure if it's possible to use any of it in a CMS environment like yours.

   Thank you for your attention!

   scottishlass
   "You can't! It's impossible! I'm far too busy, so ask me now before I can become sane." - Edna "E" Mode
   

   When a password is generated by the application, it seems quite secure. However, when people change their passwords, they usually don't make them as secure as they should be. Is there a way to reject a new password if it isn't secure? Or provide a "meter" that shows just how secure their new password really is so that they can reevaluate their choice? I know of some Javascript coding for this purpose (http://javascript.internet.com/passwords ), but I'm not sure if it's possible to use any of it in a CMS environment like yours.

   Thank you for your attention!

   scottishlass
   "You

   … more
   23 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   16 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Resolved  ·  AdminOleg Nesterkin (Product owner, Wild Apricot by Personify) responded

   We have released new password policy for new contacts in 7.27.