Search Forums
Forums
Kiwitrees on Twitter
    Tags

    getClientIp, xmas, gettext, json, 3.2.2, language, nickname, pop-ups, link, performance, lists individuals families, relationships, GEDCOM, xenea, zend, missing data, REFN, 1939 Register, contact links, Relationship, Histo, progress, fancy tree view, re-order, duplicates, simpl_research, emmigration, hover, family, clipboard, mystyle, message contactform, tags, places, mysql5.7, version, Extra menus, descendant, privacy, media_links, fatal error, googlemaps, upgrade, immigration, name, default individual, children, styles, dead, wish, google, 3.0.0 widgets, modules, 2.0.2, configure, partner, spouse, event, fixing errors, widget

    Tagged: , ,

    Topic:   Userdefined button!  

    This topic contains 4 replies, has 2 voices, and was last updated by  jacoline 1 year, 11 months ago.

    Viewing 5 posts - 1 through 5 (of 5 total)
    • Author
      Posts
    • #4613

      jacoline
      Participant

      397 posts

      I am trying to make the life easier.
      Im using pages for Inquiries and I really do have alot of pages which also contains other stuff than Inquiries. So I made a button at the bottom to directly go to edit that excact page. And I noticed if I do that – a visitor get access to edit ๐Ÿ™

      I have enclosed the html I made! How do I avoid visitor access to edit pages?

      You can see it here: http://www.jaconelli.dk/webtrees/module.php?mod=pages_userdefined_inquiries&mod_action=show&pages_id=115

      (please let me know when you have looked at this so I can remove the button again)

      Regards,
      Jamie Jaconelli

      admin and owner of:
      www.jaconelli.dk/webtrees, www.host-siden.dk/history, www.familien-johnsen.dk and danish support at www.host-siden.dk/sandbox

      Attachments:
      You must be logged in to view attached files.
      #4616
      kiwi
      kiwi
      Keymaster

      1431 posts

      Sorry, but that is not possible. You will need to use the link in the main menu (Add ons) for “Edit pages”, and you must be logged in first for that to appear.

      To use kiwitrees functions you must be able to enter PHP code, not html, and that would be a ridiculous security risk for these pages.

      Nigel

      My personal kiwitrees site is www.our-families.info

      #4617

      jacoline
      Participant

      397 posts

      You do not understand – it is possible for visitors to do this by the html button. Use the link and scroll down – hit the button in right corner – please do not delete – but try to edit access to members

      Regards,
      Jamie Jaconelli

      admin and owner of:
      www.jaconelli.dk/webtrees, www.host-siden.dk/history, www.familien-johnsen.dk and danish support at www.host-siden.dk/sandbox

      #4618
      kiwi
      kiwi
      Keymaster

      1431 posts

      I thought I understood, but perhaps it is simpler than I thought. Change mod_action=admin_edit to mod_action=show in the button link?

      (By the way, in the next release that risk is removed. Clicking on a link including mod_action=admin_edit will fail if not logged in and allowed access to the page)

      Nigel

      My personal kiwitrees site is www.our-families.info

      #4619

      jacoline
      Participant

      397 posts

      Super – now I will not worry about this ๐Ÿ™‚

      I remove the button and figure out something else to make my life easier ๐Ÿ™‚

      Regards,
      Jamie Jaconelli

      admin and owner of:
      www.jaconelli.dk/webtrees, www.host-siden.dk/history, www.familien-johnsen.dk and danish support at www.host-siden.dk/sandbox

    Viewing 5 posts - 1 through 5 (of 5 total)

    You must be logged in to reply to this topic.