aadditional querystring to view profiles

This is a forum to suggest new features for mojoPortal. 

This thread is closed to new posts. You must sign in to post in the forums.
7/9/2012 12:23:30 PM
Gravatar
Total Posts 18

aadditional querystring to view profiles

Hi Joe,

In order to continue my integration a snitz forum into mojo I wondered if it was possible to add another entry method to the profileview.aspx by passing the login name rather than the id or guid.

I wanted to change the profile links in the forum so that they open the mojo profile page and would be very easy if I could pass in the loginname.

(I tested whether it would work by just adding an extra elseif to the current code, it worked fine and didn't break anything, but there may be issues you are aware of why this may not be a practical thing to do)

Cheers

Huw

7/9/2012 12:33:52 PM
Gravatar
Total Posts 18439

Re: aadditional querystring to view profiles

LoginName is used for authentication, as such it is private data that I don't think should be passed in an url. Also I would not want to make the userprofile page respond to that in the url because that means people can try manipulating the query string and if it works they have discovered private data about the user that should not be discoverable, ie leaking private information.

The integer id or guid does not leak any private information and has no intrinsic value or meaning.

Best,

Joe

7/9/2012 12:50:18 PM
Gravatar
Total Posts 18

Re: aadditional querystring to view profiles

ok, fair enough, I'll add a column to the Snitz members table and sync across the guid to use from snitz.

 

 

on a side note for some reason I got 3 email notifications when I made the initial post ?

You must sign in to post in the forums. This thread is closed to new posts.