Forums

Issue with multiple step form URL Cancel The title field is required!

1. vmeesaraganda

   

   48 posts
   Registered:
   19 Mar 2015
   07 Apr 2015

   Link to this post

   Hi 
   After submitting a multiple step form if we copy the URL of the page then past it in some other browser we able see all the information given by the user. So if someone finds the URL of the page from browser history can see and update the request submitted by other user.
   Is there a way to handle this?
2. Clinton Bale

   

   126 posts
   Registered:
   21 Feb 2014
   Answered

   07 Apr 2015 in reply to vmeesaraganda

   Link to this post

   Hello,
   
   If you do not want the page and data to be visible by other users then you must make the page require authentication. If the page can be anonymously accessed then our GUID encryption will not be effective because the encryption is based on the user which would be the same with two anonymous users.
   
   GUID encryption also works on public/anonymous forms if the user is logged in. Navigating to the page at a later time with the same values in the query string will result in no data being loaded if the user is not logged into the original submitting user.
   
   If you have any more questions about GUID encryption let me know.
3. vmeesaraganda

   

   48 posts
   Registered:
   19 Mar 2015
   13 Apr 2015

   Link to this post

   Hi Clinton,
   Making the page "required authentication" is not an option for us, as these forms are available to anonymous users without login.
   Is there a way for not to show GUID in URL?
   
   Currently when form is submitted, GUID shows up in the URL as query string parameter. Please advise.
   
   Thanks,
   Vamsi.
4. Clinton Bale

   

   126 posts
   Registered:
   21 Feb 2014
   13 Apr 2015 in reply to vmeesaraganda

   Link to this post

   Hello,
   
   The query string parameters are currently the only way to pass values between forms for the Multi Form/Page Step Buttons. If the pages are not secure then the guids in the query string will be the same for all users using the site.
   
   We will be looking into this issue further for upcoming Portal Connector releases.
   
   Regards,
   Clinton