Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
#511 2008-12-04 23:23:05
Re: zem_contact_reborn 4.0.3.20
Still no plans to add a way to trigger a form reload during spam check? I don’t want to display a captcha if the content is not evaluated as unsure first. Otherwise I’ll need to use some hacks.
My plugins : cbs_live_search (improved) – cbs_category_list – cbs_navigation_menu – cbs_gravatar (updated) – cbs_article_index – cbs_maintenance_mode (new) – cbs_section_language (new)
Offline
#512 2008-12-05 01:50:51
- darock
- Member
- Registered: 2007-11-23
- Posts: 54
Re: zem_contact_reborn 4.0.3.20
Just discovering that this form can be used to send specific articles. Awesome.
Instead of using text for the send article hyperlink, can we use an image-based link instead? I want to have an image that would allow users to hit it which would prompt them to submit the article.
<txp:zem_contact_submit label="Send Article" />
Offline
#513 2008-12-06 14:58:09
- darock
- Member
- Registered: 2007-11-23
- Posts: 54
Re: zem_contact_reborn 4.0.3.20
I’m not sure if the problem below is a byproduct of the plugin, but I wanted to test the “send article” functionality of zem by emailing it to myself. Below is exactly how it was sent to me. As you can see, the content doesn’t have its appropriate paragraph breaks and there are ASCII character codes included in this. In the original online version on my site, all paragraphs are properly broken up with no ASCII character codes.
Thoughts?

Offline
#514 2008-12-12 14:34:35
- MikeTheVike
- Member
- Registered: 2008-06-17
- Posts: 47
Re: zem_contact_reborn 4.0.3.20
I was wondering if maybe there was a plugin that works with ZCR that will allow me to manage contacts. The PostMaster plugin is used for newsletters and uses ZCR to subscribe people. You can manage subscribers within Textpattern. But it hasn’t been updated in a while, and has a few problems.
The boss wants people to be able to fill out a form with their name, business, email, and then answer a “trivia” question. Then he wants them to be able to come back in a week, fill out the form with their name, business, email, and answer a different “trivia” question. And we would like to be able to store this info in the database, so we can look up the people, their info, and the answers to their questions. Anyone have any info or ideas?
Offline
#515 2008-12-13 16:52:51
Re: zem_contact_reborn 4.0.3.20
A Security Scan of one of my sites turned up a vulnerability relating to ZCR, Does anyone have any idea how I can get around this issue?
Possible blind sql injection on http://tamarackcellars.com/contact?zem_c ontact_form_id=6225480ff8c63dac8275dcb6af5 55e20&Name= wp —bsql “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20&Name=” “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20+and+1%3D1&Name=” “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20+and+1%3D0&Name=” POST cat <<EOF > bsql.sh curl -L -d “zem_contact_form_id=6225480ff8c63dac8275 dcb6af555e20&Name=” “http://tamarackcellars.com/contact”> a curl -L -d “zem_contact_form_id=6225480ff8c63dac8275 dcb6af555e20&Name=” “http://tamarackcellars.com/contact”> b diff a b EOF sh bsql.sh This website may have other injection related vulnerabilities.
Offline
#516 2008-12-14 14:13:14
Re: zem_contact_reborn 4.0.3.20
The zem_contact_form_id variable isn’t used in a SQL query, so this is a false positive.
Offline
#517 2008-12-14 16:32:35
Re: zem_contact_reborn 4.0.3.20
Thanks ruud time to talk with the dorkwads at security metrics
Offline
#518 2008-12-18 07:25:53
Re: zem_contact_reborn 4.0.3.20
I’m curious if you can use ZCR to create a form for a user to e-mail the website URL to someone… as opposed to a specific article, just e-mail the site URL… The thought being that there would be a global “tell a friend” link that would take the user to this form regardless of where they are on the site.
Is this possible?
Thank you.
Offline
#519 2008-12-18 07:40:33
Re: zem_contact_reborn 4.0.3.20
I am using ZCR on a site where the show_errors is displayed on a separate part of a page. All works fine. I’d like to add a custom message above the displayed form submission errors, something like “There was a problem with your contact submission”. Using an H2 tag. Can this be done?
Offline
#520 2008-12-19 12:36:49
Re: zem_contact_reborn 4.0.3.20
maodiddy, you can easily do that creating a normal contact form and enclose the <txp:permlink /> tag in a <txp:zem_contact_secret /> tag in your contact form.
Jonathan, you can edit the plugin. Find the line that says $out .= n.'<ul class="zemError">'; and add your custom h2 header before the UL tag.
Offline
#521 2008-12-21 00:58:09
Re: zem_contact_reborn 4.0.3.20
Hi Ruud – thanks for getting back to me. Please forgive my ignorance – I’m not sure I entirely understand how to do this. This is what I have thus far.
The form, “referral_form” :
<txp:zem_contact_email label="Recipient Email" break="" />
<txp:zem_contact_email label="Your Email" break="" />
<txp:zem_contact_secret value='<txp:site_url />' />
<txp:zem_contact_textarea default="I thought you would really enjoy this website!" break="" />
<txp:zem_contact_submit label="Tell A Friend" />
<p id="requiredFieldMessage">* Denotes required field</p>
is included on the contact page after the article, “refer-a-friend” (article ID=12) :
<txp:output_form form="head" />
<div id="main">
<txp:if_individual_article>
<txp:if_article_id id="12">
<h2><txp:title /></h2>
<txp:body />
<txp:zem_contact to="michael@maostudios.com" redirect="contact/confirmation" form="referral_form" label="" show_error="1" />
<txp:else />
<txp:body />
</txp:if_article_id>
</txp:if_individual_article>
</div>
</div><!-- end main -->
<txp:output_form form="footer" />
What I am intending to do is have this form send a message to the e-mail entered as the “recipient email” with the message from the “message” field and a link to the site URL… so the message in the recipient’s inbox would look like:
Hi! I thought you would find this site interesting:
www.siteURL.com
I don’t want this message to e-mail to the site owner necessarily and I want the message to read natural to the recipient… I also don’t want to e-mail a link to a specific article, just the home page of the site… Can you help me understand how to do this better?
Thank you so much,
Michael
Offline
#522 2008-12-21 08:25:26
Re: zem_contact_reborn 4.0.3.20
Try replacing
<txp:zem_contact_textarea default="I thought you would really enjoy this website!" break="" />
with:
<txp:zem_contact_secret label="I thought you would really enjoy this website!"><txp:permlink /></txp:zem_contact_secret>
Offline
#523 2008-12-21 09:07:14
Re: zem_contact_reborn 4.0.3.20
Thanks for the assistance, Ruud – however, this doesn’t solve any of the issues. This only creates an e-mail that still goes to the site owner (or whoever I define in the <txp:zem_contact to=“siteowner@siteurl.com” /> field) and the permlink is still specific to the article being viewed when sent – in this case the referral form page.
The e-mail doesn’t go to the recipient at all – I tested this – it only goes to the e-mail defined in the “to” field of the <txp:zem_contact /> tag… which is NOT the recipient e-mail.
What I want to do is create a form that enables the user to fill out their own personal message and also provides a link to the HOME page of the site. I don’t want this email to send to anyone except the e-mail that is filled out in the e-mail recipient field. Is this possible?
Thank you,
Michael
Offline
#524 2008-12-21 10:18:02
Re: zem_contact_reborn 4.0.3.20
Hmm… know your own plugin, heh ;)
Have you looked at the ‘send_article’ attribute for the zem_contact tag (see plugin help)?
Offline
#525 2008-12-21 19:09:14
Re: zem_contact_reborn 4.0.3.20
I have looked at that, however I can’t get it to send a URL to just the home page instead of the page where the referral form is located. Also I can’t figure out how to send to just the recipient (or get the recipient’s email in the “to” property)…
Basically I want to be able to send a message with a link to the home page (as opposed to just a link to the current article) to only the recipient the user defines, not the recipient defined by the webmaster.
Does that make sense? Is it possible, and if so how is it done?
Perhaps there’s another method or plugin that does this better but so far I haven’t been able to find one.
Thanks for your help,
Michael
Offline