Welcome, Guest
Username: Password: Remember me

TOPIC: Can I show a survey only to "registered users"?

Can I show a survey only to "registered users"? 2 years 5 months ago #80003

  • atiut
  • atiut's Avatar
  • OFFLINE
  • Senior Lime
  • Posts: 76
  • Thank you received: 2
  • Karma: 1
I would like to use LS for some registration form. Once completed, an email is sent (via admin notification) and the token effectively becomes the registration number.

However, the link remains active and can be re-edited.

And now my problem. As a registration number, the token is seen by a larger public. So anyone knowing it coul re-construct the link and visit the form.

What I want is to restrict link access to a limited number of authorised users while making the token available to a larger public. Is this possible?
The administrator has disabled public write access.

Re: Can I show a survey only to "registered users"? 2 years 5 months ago #80004

  • lowprofile
  • lowprofile's Avatar
  • OFFLINE
  • Junior Lime
  • Posts: 22
  • Thank you received: 1
  • Karma: 0
this is not how i understand registration to work
1. You have a survey which allows public registration
2. You set the survey so you the token can only do the survey once
3. Once completed the user receives an email
4. No one knows another users token unless they publish it or 5.
5. Tokens by default are 16? characters long, a hacker needs e fairly patient to find that token, its more likely they will take down the website running combinations trying to find it.
The administrator has disabled public write access.

Re: Can I show a survey only to "registered users"? 2 years 5 months ago #80013

  • atiut
  • atiut's Avatar
  • OFFLINE
  • Senior Lime
  • Posts: 76
  • Thank you received: 2
  • Karma: 1
Your understanding is correct. However, I want to keep the study private <i> and</i> make the token relatively public.

In other words, is there a reasonably simple way to hack the registration process?
The administrator has disabled public write access.

Re: Can I show a survey only to "registered users"? 2 years 5 months ago #80090

  • Mazi
  • Mazi's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 5348
  • Thank you received: 298
  • Karma: 250
atiut wrote:
Your understanding is correct. However, I want to keep the study private <i> and</i> make the token relatively public.
That approach doesn't make much sense to me. A token is a one time private key which is known only to the user.
Maybe this workaround somehow helps as an alternative approach: docs.limesurvey.org/tiki-index.php?page=...r_accessing_a_survey

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.
Moderators: ITEd
Time to create page: 0.117 seconds
Donation Image