4 results found

1. Name & Phone # Leaked when Email is known

   If a person enters a known, valid email address on the first event registration page, the 2nd page is pre-populated with the first name, last name, and phone number matching the email address.

   Someone familiar with email address of people in the organization (or someone guessing or brute forcing) can obtain the person's phone number or full name in an unauthorized manner doing this.

   •  

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Archived  ·  AdminKatya Tyukina (Director of Product Management, Wild Apricot by Personify) responded

   Details are presented in the comment.

2. SSL and Security Issues in view of Google warnings

   Solution for SSL issue for those of us with our own domain names. This is a huge issue and I feel Wild Apricot needs to find a solution for those of us with few technical skills. This is a very serious issue. People will be scared off by Google messages saying our sites are insecure.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security / Privacy  ·  Delete…  ·  Admin →
   Archived  ·  Evgeny Zaritovskiy responded

   We are working on “let’s encrypt” feature (free certificate). While it’s in progress, contact our support to help you with this question.

3. Fix bug with custom domain and WP login shortcode

   Issues with Wordpress Integration:

   When I switched to a custom domain with no ssl I set my security to "payments only". However the login shortcode for WP automatically puts in my custom subdomain so I get a security error because it does not have an SSL. Essentially you cannot use a custom domain with no SSL if you are integrating with WP.

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Archived  ·  1 comment  ·  Security / Privacy  ·  Delete…  ·  Admin →

4. Add user information in hidden input tags to each page

   Any page personalization or links to other sites with user identifiers as URL parameters is very complex because this info is only available on the user's profile page and has to be scraped from that page. This results in some very convoluted javascript with cross page dependencies. Also, whenever Wild Apricot changes the format of the profile page, the custom javascript will break.

   Can you please add input hidden tags with some key user profile values to every page:

   • UserID

   • UserName

   • UserEmailAddress

   like:

   <input type="hidden" id="UserID" name="UserID" value="12345678" />

   <input type="hidden" id="UserName" name="UserName" value="Joe User" />

   <input type="hidden" id="UserEmail" name="UserEmail" value="joe.user@domain.com" />

   Any page personalization or links to other sites with user identifiers as URL parameters is very complex because this info is only available on the user's profile page and has to be scraped from that page. This results in some very convoluted javascript with cross page dependencies. Also, whenever Wild Apricot changes the format of the profile page, the custom javascript will break.

   Can you please add input hidden tags with some key user profile values to every page:

   • UserID

   • UserName

   • UserEmailAddress

   like:

   <input type="hidden" id="UserID" name="UserID" value="12345678" />

   <input type="hidden" id="UserName" name="UserName" value="Joe User" />

   <input type="hidden" id="UserEmail" name="UserEmail"… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Archived  ·  1 comment  ·  Security / Privacy  ·  Delete…  ·  Admin →