Extension talk:PostForm

From mediawiki.org
Latest comment: 12 years ago by Bytesmiths in topic SERIOUS SECURITY BREACH!

I am trying to increase the functionality of this extension with a drop down list that has names of people and when the user selects the name it sends an e-mail to that particular person as well when submitting the form. Has anyone done something similar? have you had any ideas. Thanks

Not working for me...[edit]

I installed it and tried pasting the example form code into my wiki, but all it does is display the raw html, not the form...

Use from within a template?[edit]

I find (surprise, surprise) that arguments passed into a template are not working. For example, I want a form that can be used for registration for multiple events, with the event passed in the "Subject:" line. But when I do that, the email comes through with the formal parameter "{{{1}}}" in it, rather than the actual parameter.

I tried using it as a {{#tag:postform...}}, but couldn't get it to work.

Any ideas how to make this work within a template? Thanks!

--Bytesmiths 01:02, 14 February 2011 (UTC)Reply

Never mind, figgerd it out...[edit]

  1. Upgrade to 1.16a (I'm still on 1.13)
  2. The "contents" (the stuff between opening and closing <postform ...> tags) must be the second argument when an extension is used via {{#tag: ...}}

--Bytesmiths 21:10, 14 February 2011 (UTC)Reply

SERIOUS SECURITY BREACH![edit]

Note that everything ever sent through any form using this extension is available from a web browser via $wgUploadDirectory/postform.log!

If your site allows directory listings, everything that was ever sent through this extension will end up indexed in Google!

I changed:

$logfile = $wgUploadDirectory . '/postform.log';

to:

$logfile = '/var/log/postform.log';

which seems like a saner way of doing things.

--Bytesmiths 04:20, 13 January 2012 (UTC)Reply