Menu
▾
▴
phpesp-devel
|
From: SourceForge.net <no...@so...> - 2004-04-30 15:52:44
|
Feature Requests item #945383, was opened at 2004-04-30 10:52 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None Status: Open Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
|
From: SourceForge.net <no...@so...> - 2004-05-10 06:27:21
|
Feature Requests item #945383, was opened at 2004-05-01 01:52 Message generated for change (Comment added) made by angek You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None Status: Open Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- >Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 16:27 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
|
From: SourceForge.net <no...@so...> - 2004-05-10 06:31:57
|
Feature Requests item #945383, was opened at 2004-05-01 01:52 Message generated for change (Comment added) made by angek You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None Status: Open Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- >Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 16:31 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 16:27 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
|
From: SourceForge.net <no...@so...> - 2004-05-10 12:13:01
|
Feature Requests item #945383, was opened at 2004-04-30 10:52 Message generated for change (Comment added) made by greggmc You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None Status: Open Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- >Comment By: Matthew Gregg (greggmc) Date: 2004-05-10 07:12 Message: Logged In: YES user_id=14116 I didn't think someone seeing/submitting a survey in "testing' mode was that big of a deal. Could it be? I was planning on using security by obscurity, by that I mean it would be hard to guess the name of other surveys. This request comes from our users who constently want to test a survey with several people, which requires a good bit of work for the administrator(create groups, put people in the groups, etc...) and is compounded when using LDAP authentication. A configuration variable in phpESP.ini could be set to disallow public testing(by default) if someone feels this opens a security hole. ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 01:31 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 01:27 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
|
From: SourceForge.net <no...@so...> - 2004-05-11 00:55:36
|
Feature Requests item #945383, was opened at 2004-05-01 01:52 Message generated for change (Comment added) made by angek You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None Status: Open Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- >Comment By: Kon Angelopoulos (angek) Date: 2004-05-11 10:55 Message: Logged In: YES user_id=198398 I'm not sure it's such a security hole. Like you said, it's pretty hard to guess the survey name. A configuration variable would probably suffice. ---------------------------------------------------------------------- Comment By: Matthew Gregg (greggmc) Date: 2004-05-10 22:12 Message: Logged In: YES user_id=14116 I didn't think someone seeing/submitting a survey in "testing' mode was that big of a deal. Could it be? I was planning on using security by obscurity, by that I mean it would be hard to guess the name of other surveys. This request comes from our users who constently want to test a survey with several people, which requires a good bit of work for the administrator(create groups, put people in the groups, etc...) and is compounded when using LDAP authentication. A configuration variable in phpESP.ini could be set to disallow public testing(by default) if someone feels this opens a security hole. ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 16:31 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 16:27 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
|
From: SourceForge.net <no...@so...> - 2005-03-08 20:57:28
|
Feature Requests item #945383, was opened at 2004-04-30 10:52 Message generated for change (Comment added) made by greggmc You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 Category: None Group: None >Status: Closed Priority: 5 Submitted By: Matthew Gregg (greggmc) Assigned to: Matthew Gregg (greggmc) Summary: Allow surveys in test mode to be tested. Initial Comment: Create a public/test.php?name=survey_name so that surveys in test mode can be testing publicly. ---------------------------------------------------------------------- >Comment By: Matthew Gregg (greggmc) Date: 2005-03-08 15:57 Message: Logged In: YES user_id=14116 Surveys in "test" mode can now be publicly tested by adding &test=1 to the survey publishing url. For example: http://host/phpESP/survey.php&name=foo?test=1 This needs to be added to the docs and a url showing this in the management interface. ---------------------------------------------------------------------- Comment By: Matthew Gregg (greggmc) Date: 2005-03-08 15:57 Message: Logged In: YES user_id=14116 This feature has been added to the CVS tree. It will be available in the next release of phpESP. For instructions on obtaining sources from CVS please see: http://sourceforge.net/cvs/?group_id=8956 ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 19:55 Message: Logged In: YES user_id=198398 I'm not sure it's such a security hole. Like you said, it's pretty hard to guess the survey name. A configuration variable would probably suffice. ---------------------------------------------------------------------- Comment By: Matthew Gregg (greggmc) Date: 2004-05-10 07:12 Message: Logged In: YES user_id=14116 I didn't think someone seeing/submitting a survey in "testing' mode was that big of a deal. Could it be? I was planning on using security by obscurity, by that I mean it would be hard to guess the name of other surveys. This request comes from our users who constently want to test a survey with several people, which requires a good bit of work for the administrator(create groups, put people in the groups, etc...) and is compounded when using LDAP authentication. A configuration variable in phpESP.ini could be set to disallow public testing(by default) if someone feels this opens a security hole. ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 01:31 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- Comment By: Kon Angelopoulos (angek) Date: 2004-05-10 01:27 Message: Logged In: YES user_id=198398 Whould this be controlled by access rights? Do we want to allow people from groups other than that assigned to the particular survey to be able to test it? ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=358956&aid=945383&group_id=8956 |
×
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.
Thanks for helping keep SourceForge clean.
X