TYPOlight version 2.6.3 available
TYPOlight version 2.6.3 is available. The maintenance release includes
a hardened Input class that detects even more malicious XSS code and an important Safe Mode Hack fix.
Read the announcement of all changes
Jesson
TYPOlight novice
Posts: 5
London, United Kingdom
Hey everyone,
I want a few downloads to be available on a site but only after users fill in a small form.
Here's what I'm thinking:
- Data capture form includes name, email and company only to be store in db
- Download link visible once form is submitted
- Check if email is valid structure, but no need for real authentication*
- No need to fill in this form again for the rest of the session*
- Download link to be temporary (optional)*
*would consider dropping these for better/quicker solutions
Could you tell me what my options are?
Thanks,
Jesson
2008-11-17 16:59
360fusion
TYPOlight novice
Posts: 47
Middlesbrough, United Kingdom
Would creating a landing page for the form success with the downloads on do the trick?
A form succsses page that when the form is submitted the user is taken to. if you make all the fields mandatory the user will have to fill them in before progressing. This page will be hidden from the site navigation so it can't be accessed any other way.
Last edited by 360fusion, 2008-11-18 16:14
2008-11-18 16:13
seaneble
TYPOlight professional
Posts: 1203
Stuttgart, Germany
HI
bur it will be accessible if you know the URL, and if it is an important download this information will find its way around...
seaneble
2008-11-18 17:25
360fusion
TYPOlight novice
Posts: 47
Middlesbrough, United Kingdom
If they are important downloads how about getting people to sign up to become members, create a user group, then set the page to only be able to be viewed by the groups members once logged in?
2008-11-18 21:40
Jesson
TYPOlight novice
Posts: 5
London, United Kingdom
Thanks for the responses guys.
How would I do a form response page? and would this cover the part where the user could see other files that they navigate to later on?
Security isn't really an issue, hence open approach with no email authentication and immediate availability. Would be interested to know what to do if it was important. That's what I meant about the download link being temporary.
I've considered the use of members, however the login idea doesn't work. For simplicity, I don't want them to have to create a username and password. And the site will have a login to somewhere completely separate.
What about a hack on the basis of sending the form with hidden elements for a member login, while capturing the data (I don't know how), they could be logged in to my generic file viewer member and directed to the 'members' only downloads, this would cover the whole session. Does this make sense?
Either way, I've no idea how to do this and I'm open to any other suggestions.
Thanks,
Jesson
2008-11-19 01:31
Ben
TYPOlight partner
Posts: 1963
Atlanta, Georgia, United States
Jesson,
I'm with 360fusion - I would have people signup for an account. It sounds like you'd rather not do this, though.
To accomplish your hidden login fields idea, I haven't heard of anyone doing this, but it might work. Here's what I'd try:
- add hidden fields to your form for username and password
- put a login form on the form success/redirect page
- make the login form redirect to that same page
- place the files on the page, protected so only the group can see them
Not sure if it will work, but that's how I would get started.
You should also send a PM to FBliss. I believe he's got an extension he's created that might do exactly what you want. If I remember correctly, he calls it the "Tokenizer extension".
Let us know how things go ... and welcome to the community!
2008-11-19 08:29
Jesson
TYPOlight novice
Posts: 5
London, United Kingdom
Thanks Ben,
I agree, the member route would be the best way 99.9% of the time, it's just that there is going to be a login form on the page for something else.
I'll check out the extension and try out your suggestion and let you know how it goes.
All the best,
Jesson
2008-11-19 14:49
seaneble
TYPOlight professional
Posts: 1203
Stuttgart, Germany
HI
or you let the user fill in a form and a response mail is sent to him (use efg) with the login details of a guest account that is allowed to view the downloadpage.
seaneble
2008-11-19 22:16
Total Members: 3217
Total Topics: 8601
Total Messages: 58210