1. distudios
  2. General
  3. Tuesday, March 01 2016, 04:30 PM
Hi,

How come your website have the functionality; witch keeps the value of search after previous page button on a browser has clicked and your component (easy profile) doesn't.
This is not really user friendly and i have receive so many complain on my website about this.

I get a 404 page after I search a user with a googlemal-Search-bar and i try to go back after viewing a profile.

Please help me solve this problem.

thank you
admin Accepted Answer
Admin
Hi,
can you please post me your site details?
  1. more than a month ago
  2. General
  3. # 1
distudios Accepted Answer
Pro
Content Protected
  1. more than a month ago
  2. General
  3. # 2
admin Accepted Answer
Admin
Hi,
sorry I not understand how to see the problem in your site.

Anyway when you click to back button (into browser), you need to resend a request, so some browsers (like firefox or safari) ask you to resend informations.

This happen because our search form use POST method to send search parameters.

Why POST method? Because to improve security for each Easy Profile form is required an Access Token. Joomla Access Token system require post method.
  1. more than a month ago
  2. General
  3. # 3
distudios Accepted Answer
Pro
Right I understand this Post method why you are using it. Still Im stuck with an un-userfriendly situation.
I there a way to GET (php ) the value on the profile page and send it back as a submit form to the search module when the Back Page of The Browser is clicked??
  1. more than a month ago
  2. General
  3. # 4
admin Accepted Answer
Admin
Hi,
this is possible, but less secure.

Follow these steps:
1) comment or remove line 96 in file /components/com_jsn/controller.php
if(JFactory::getApplication()->input->get('search',0) && !JSession::checkToken()){die('Not Valid Token');}


2) replace "post" with "get" in following files
- /components/com_jsn/views/list/tmpl/table_search.php at line 14 (user table search form)
- /components/com_jsn/views/list/tmpl/default_search.php at line 14 (user list search form)
- /modules/mod_jsnsearch/tmpl/default.php at line 18 (search module form)
  1. more than a month ago
  2. General
  3. # 5
distudios Accepted Answer
Pro
Thank you very, much, that solved my situation.
Can you elaborate on the security risks?

Thank you again for the fast response.
  1. more than a month ago
  2. General
  3. # 6
admin Accepted Answer
Admin
Now on your site I can make a search with a simple request like
http://your-domain.com/users-list.html?name=&;interests%5B%5D=music&interests%5B%5D=movie&age=1&age_from=&age_to=&address=Zurigo%2C+Svizzera&address_radius=10&address_lat=47.3768866&address_lng=8.541694000000007&search=1&76fcc95a72e88f105584ed4a4dd58aa4=1

Some research generates a very complex query (especially the search for fields with privacy or the search for gmap fields).
Now if I have 10 server/computer that launch a request each second on your site you risk that your server break down (or come very slow).

Keep in mind that Easy Profile is mainly a profiler component (not directory component) and it is designed for to ensure safety in the majority of systems (Joomla is mainly installed on shared servers). If you have a powerfull server and/or some security software that limits this behaviour then you will not have any problems.
  1. more than a month ago
  2. General
  3. # 7
  • Page :
  • 1


There are no replies made for this post yet.
However, you are not allowed to reply to this post.