Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#511 2008-12-04 23:23:05

cbeyls
Archived Plugin Author
From: Brussels, Belgium
Registered: 2005-09-12
Posts: 136
Website

Re: zem_contact_reborn 4.0.3.20

Still no plans to add a way to trigger a form reload during spam check? I don’t want to display a captcha if the content is not evaluated as unsure first. Otherwise I’ll need to use some hacks.


My plugins : cbs_live_search (improved) – cbs_category_list – cbs_navigation_menu – cbs_gravatar (updated) – cbs_article_index – cbs_maintenance_mode (new) – cbs_section_language (new)

Offline

#512 2008-12-05 01:50:51

darock
Member
Registered: 2007-11-23
Posts: 54

Re: zem_contact_reborn 4.0.3.20

Just discovering that this form can be used to send specific articles. Awesome.

Instead of using text for the send article hyperlink, can we use an image-based link instead? I want to have an image that would allow users to hit it which would prompt them to submit the article.

<txp:zem_contact_submit label="Send Article" />

Offline

#513 2008-12-06 14:58:09

darock
Member
Registered: 2007-11-23
Posts: 54

Re: zem_contact_reborn 4.0.3.20

I’m not sure if the problem below is a byproduct of the plugin, but I wanted to test the “send article” functionality of zem by emailing it to myself. Below is exactly how it was sent to me. As you can see, the content doesn’t have its appropriate paragraph breaks and there are ASCII character codes included in this. In the original online version on my site, all paragraphs are properly broken up with no ASCII character codes.

Thoughts?

Offline

#514 2008-12-12 14:34:35

MikeTheVike
Member
Registered: 2008-06-17
Posts: 47

Re: zem_contact_reborn 4.0.3.20

I was wondering if maybe there was a plugin that works with ZCR that will allow me to manage contacts. The PostMaster plugin is used for newsletters and uses ZCR to subscribe people. You can manage subscribers within Textpattern. But it hasn’t been updated in a while, and has a few problems.

The boss wants people to be able to fill out a form with their name, business, email, and then answer a “trivia” question. Then he wants them to be able to come back in a week, fill out the form with their name, business, email, and answer a different “trivia” question. And we would like to be able to store this info in the database, so we can look up the people, their info, and the answers to their questions. Anyone have any info or ideas?

Offline

#515 2008-12-13 16:52:51

mrdale
Member
From: Walla Walla
Registered: 2004-11-19
Posts: 2,215
Website

Re: zem_contact_reborn 4.0.3.20

A Security Scan of one of my sites turned up a vulnerability relating to ZCR, Does anyone have any idea how I can get around this issue?

Possible blind sql injection on http://tamarackcellars.com/contact?zem_c ontact_form_id=6225480ff8c63dac8275dcb6af5 55e20&Name= wp —bsql “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20&Name=” “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20+and+1%3D1&Name=” “http://tamarackcellars.com/contact?zem_ contact_form_id=6225480ff8c63dac8275dcb6af 555e20+and+1%3D0&Name=” POST cat <<EOF > bsql.sh curl -L -d “zem_contact_form_id=6225480ff8c63dac8275 dcb6af555e20&Name=” “http://tamarackcellars.com/contact”> a curl -L -d “zem_contact_form_id=6225480ff8c63dac8275 dcb6af555e20&Name=” “http://tamarackcellars.com/contact”> b diff a b EOF sh bsql.sh This website may have other injection related vulnerabilities.

Offline

#516 2008-12-14 14:13:14

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: zem_contact_reborn 4.0.3.20

The zem_contact_form_id variable isn’t used in a SQL query, so this is a false positive.

Offline

#517 2008-12-14 16:32:35

mrdale
Member
From: Walla Walla
Registered: 2004-11-19
Posts: 2,215
Website

Re: zem_contact_reborn 4.0.3.20

Thanks ruud time to talk with the dorkwads at security metrics

Offline

#518 2008-12-18 07:25:53

maodiddy
Member
From: Seattle, WA - USA
Registered: 2008-02-10
Posts: 17
Website

Re: zem_contact_reborn 4.0.3.20

I’m curious if you can use ZCR to create a form for a user to e-mail the website URL to someone… as opposed to a specific article, just e-mail the site URL… The thought being that there would be a global “tell a friend” link that would take the user to this form regardless of where they are on the site.

Is this possible?

Thank you.

Offline

#519 2008-12-18 07:40:33

jstubbs
Member
From: Hong Kong
Registered: 2004-12-13
Posts: 2,395
Website

Re: zem_contact_reborn 4.0.3.20

I am using ZCR on a site where the show_errors is displayed on a separate part of a page. All works fine. I’d like to add a custom message above the displayed form submission errors, something like “There was a problem with your contact submission”. Using an H2 tag. Can this be done?

Offline

#520 2008-12-19 12:36:49

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: zem_contact_reborn 4.0.3.20

maodiddy, you can easily do that creating a normal contact form and enclose the <txp:permlink /> tag in a <txp:zem_contact_secret /> tag in your contact form.

Jonathan, you can edit the plugin. Find the line that says $out .= n.'<ul class="zemError">'; and add your custom h2 header before the UL tag.

Offline

#521 2008-12-21 00:58:09

maodiddy
Member
From: Seattle, WA - USA
Registered: 2008-02-10
Posts: 17
Website

Re: zem_contact_reborn 4.0.3.20

Hi Ruud – thanks for getting back to me. Please forgive my ignorance – I’m not sure I entirely understand how to do this. This is what I have thus far.

The form, “referral_form” :

<txp:zem_contact_email label="Recipient Email" break="" />
  <txp:zem_contact_email label="Your Email" break="" />
  <txp:zem_contact_secret value='<txp:site_url />' />
  <txp:zem_contact_textarea default="I thought you would really enjoy this website!" break="" />
  <txp:zem_contact_submit label="Tell A Friend" />
  <p id="requiredFieldMessage">* Denotes required field</p>

is included on the contact page after the article, “refer-a-friend” (article ID=12) :

<txp:output_form form="head" />
	<div id="main">
    	<txp:if_individual_article>
        <txp:if_article_id id="12">
		<h2><txp:title /></h2>
		<txp:body />
		<txp:zem_contact to="michael@maostudios.com" redirect="contact/confirmation" form="referral_form" label="" show_error="1" />
	<txp:else />
		<txp:body /> 
	</txp:if_article_id>
    	</txp:if_individual_article>
    	</div>
	</div><!-- end main -->
<txp:output_form form="footer" />

What I am intending to do is have this form send a message to the e-mail entered as the “recipient email” with the message from the “message” field and a link to the site URL… so the message in the recipient’s inbox would look like:

Hi! I thought you would find this site interesting:
www.siteURL.com

I don’t want this message to e-mail to the site owner necessarily and I want the message to read natural to the recipient… I also don’t want to e-mail a link to a specific article, just the home page of the site… Can you help me understand how to do this better?

Thank you so much,
Michael

Offline

#522 2008-12-21 08:25:26

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: zem_contact_reborn 4.0.3.20

Try replacing

<txp:zem_contact_textarea default="I thought you would really enjoy this website!" break="" />

with:

<txp:zem_contact_secret label="I thought you would really enjoy this website!"><txp:permlink /></txp:zem_contact_secret>

Offline

#523 2008-12-21 09:07:14

maodiddy
Member
From: Seattle, WA - USA
Registered: 2008-02-10
Posts: 17
Website

Re: zem_contact_reborn 4.0.3.20

Thanks for the assistance, Ruud – however, this doesn’t solve any of the issues. This only creates an e-mail that still goes to the site owner (or whoever I define in the <txp:zem_contact to=“siteowner@siteurl.com” /> field) and the permlink is still specific to the article being viewed when sent – in this case the referral form page.

The e-mail doesn’t go to the recipient at all – I tested this – it only goes to the e-mail defined in the “to” field of the <txp:zem_contact /> tag… which is NOT the recipient e-mail.

What I want to do is create a form that enables the user to fill out their own personal message and also provides a link to the HOME page of the site. I don’t want this email to send to anyone except the e-mail that is filled out in the e-mail recipient field. Is this possible?

Thank you,
Michael

Offline

#524 2008-12-21 10:18:02

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: zem_contact_reborn 4.0.3.20

Hmm… know your own plugin, heh ;)

Have you looked at the ‘send_article’ attribute for the zem_contact tag (see plugin help)?

Offline

#525 2008-12-21 19:09:14

maodiddy
Member
From: Seattle, WA - USA
Registered: 2008-02-10
Posts: 17
Website

Re: zem_contact_reborn 4.0.3.20

I have looked at that, however I can’t get it to send a URL to just the home page instead of the page where the referral form is located. Also I can’t figure out how to send to just the recipient (or get the recipient’s email in the “to” property)…

Basically I want to be able to send a message with a link to the home page (as opposed to just a link to the current article) to only the recipient the user defines, not the recipient defined by the webmaster.

Does that make sense? Is it possible, and if so how is it done?
Perhaps there’s another method or plugin that does this better but so far I haven’t been able to find one.

Thanks for your help,
Michael

Offline

Board footer

Powered by FluxBB