Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: security issues

security issues 5 years 3 weeks ago #55413

  • chupanibre
  • chupanibre's Avatar
  • Offline
  • Junior Lime
  • Posts: 29
  • Karma: 0
I tried this, but it didn´t work. I set the first question of the second questionnaire as visible question, the question type is "short free text"
I set the end-url as: cape42heidelberg.limequery.org/index.php...&19196X3X10={SAVEDID}

When I start the second survey (using the link provided at the end of the first questionnaire), the first question is not populated with the SAVEDID....
The administrator has disabled public write access.

security issues 5 years 3 weeks ago #55414

  • tfj
  • tfj's Avatar
  • Offline
  • Expert Lime
  • Posts: 80
  • Thank you received: 6
  • Karma: 5
The ID field in LimeSurvey tables is an integer.

What happens when you set 19196X3X10 in your second survey to numerical input question type?

tfj
Last Edit: 5 years 3 weeks ago by tfj.
The administrator has disabled public write access.
The following user(s) said Thank You: chupanibre

security issues 5 years 3 weeks ago #55426

  • Mazi
  • Mazi's Avatar
  • Offline
  • LimeSurvey Team
  • Posts: 5840
  • Thank you received: 347
  • Karma: 261
The URL looks correct. Are both surveys activated?

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.
The following user(s) said Thank You: chupanibre

security issues 5 years 3 weeks ago #55444

  • chupanibre
  • chupanibre's Avatar
  • Offline
  • Junior Lime
  • Posts: 29
  • Karma: 0
No, but I turned "Survey preview only for administration users" off....
The administrator has disabled public write access.

security issues 5 years 2 weeks ago #55456

  • tpartner
  • tpartner's Avatar
  • Offline
  • LimeSurvey Team
  • Posts: 5410
  • Thank you received: 1154
  • Karma: 479
The URL is correct, I just tried cape42heidelberg.limequery.org/index.php...ang=de&19196X3X10=55 and it correctly populated your first question with "55".

When you try it from your first survey do you see a value for 19196X3X10 appended to the URL or does it just end with "&19196X3X10="?
Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.

LimeSurvey is open-source and run entirely by volunteers so please consider donating to support the project.
The administrator has disabled public write access.

security issues 5 years 2 weeks ago #55457

  • tpartner
  • tpartner's Avatar
  • Offline
  • LimeSurvey Team
  • Posts: 5410
  • Thank you received: 1154
  • Karma: 479
Ah, and Mazi is correct, the first survey will need to be activated to generate a SAVEDID.
Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.

LimeSurvey is open-source and run entirely by volunteers so please consider donating to support the project.
Last Edit: 5 years 2 weeks ago by tpartner.
The administrator has disabled public write access.

security issues 5 years 2 weeks ago #55458

  • tpartner
  • tpartner's Avatar
  • Offline
  • LimeSurvey Team
  • Posts: 5410
  • Thank you received: 1154
  • Karma: 479
Here's a quick test - www.partnersinc.biz/surveys//index.php?s...46&newtest=Y&lang=en

The first survey redirect to the second with the SAVEDID.
Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.

LimeSurvey is open-source and run entirely by volunteers so please consider donating to support the project.
The administrator has disabled public write access.
The following user(s) said Thank You: chupanibre

Aw: security issues 5 years 2 weeks ago #55470

  • chupanibre
  • chupanibre's Avatar
  • Offline
  • Junior Lime
  • Posts: 29
  • Karma: 0
It worked! After activating the first survey I was able to populate the first question of the second survey with SAVEDID...

I think this is an easy and effective way to set up a survey collecting personal data in compliance with rules regarding data protection, thanks a lot for your valuable help!

Best,
Chupa
The administrator has disabled public write access.

Aw: security issues 5 years 2 weeks ago #55488

  • Mazi
  • Mazi's Avatar
  • Offline
  • LimeSurvey Team
  • Posts: 5840
  • Thank you received: 347
  • Karma: 261
You're welcome!

If our hints have been helpful and you enjoy limesurvey please consider a donation to the team .
We do all this in our free time and you don't have to pay a penny for this software.

Without your help we can't keep this project alive.

Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)limesurvey.org'"
The administrator has disabled public write access.

security issues 3 years 10 months ago #76491

  • jsmello
  • jsmello's Avatar
  • Offline
  • Junior Lime
  • Posts: 32
  • Karma: 0
Is there an option that stores the information encrypted in the Limesurvey?

THe suggestion in this thread talks about the storage of the some information in a separated (encrypted) database. If I understood right, the user makes a "trigger" to decrypt the data of the limesurvey database?
The administrator has disabled public write access.

security issues 3 years 10 months ago #76495

  • tfj
  • tfj's Avatar
  • Offline
  • Expert Lime
  • Posts: 80
  • Thank you received: 6
  • Karma: 5
If you are referring to my suggestions, there is no trigger. I have written mySQL queries to encrypt confidential fields in our LimeSurvey tables on a scheduled, frequent basis. I use an added field at the end of each table to keep track of which records have already been encrypted.

When required, I have written mySQL decryption queries to decrypt and export to Excel, etc.

None of the above is a feature of LimeSurvey. One of my biggest wishes, though, would be for LimeSurvey to have a built-in feature that encrypts data as they are put in the table, using a seed of my own choosing. For now, though, my method works well enough for us.

tfj
The administrator has disabled public write access.

security issues 3 years 10 months ago #76510

  • jsmello
  • jsmello's Avatar
  • Offline
  • Junior Lime
  • Posts: 32
  • Karma: 0
So, let me see if I understood correctly. From time to time you encrypt your limesurvey table using mySQL queries through and, when you need read the data, you decrypt using another mySQL querie written by you.

This solution solves, partially, data storage problems inside the Limesurvey platform.

Tjf, Did you put your solution in the wiki?
The administrator has disabled public write access.

security issues 3 years 10 months ago #76513

  • tfj
  • tfj's Avatar
  • Offline
  • Expert Lime
  • Posts: 80
  • Thank you received: 6
  • Karma: 5
It is much more than "time to time." It is throughout the day, every day, at frequent intervals.

I did not post the solution since:

1) It really has nothing to do (directly) with LimeSurvey; it is totally a mySQL solution

2) There didn't seem to be much interest

3) My queries, by nature, have to remain confidential. I think it may be enough to say that I used the mySQL Encryption and Decryption functions for those individual fields that are confidential. I then put the queries on a schedule. I use Navicat, a gui for mySQL, to make things easier. Any good mySQL reference manual (or Internet search) could explain what I did much better than I could.
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Moderators: ITEd
Time to create page: 0.774 seconds