Please help us help you and fill where relevant:
Your LimeSurvey version:
LimeSurvey Community Edition
Version 6.17.3+260512
Own server or LimeSurvey hosting: own server
Survey theme/template: fruity extended
==================
We have this feedback survey, delivered via email from our crm, where I successfully precompile an event ID and an email address to be put in CC for the results, directly in the link that I share with customers.
But now I'm asked to
include fields that contain longer data, with spaces and also potentially multiple rows and special characters. I reckon this cannot be included in the url.
what are my options? As I understand, I have two methods:
1) an intermediate url on mysurveysite/feedback.php?EventID -> php connects to my event database, pulls data from it, creates token in LS with added variables -> forwards user to LS with token
2) my crm uses LS api to do the token creation + variables, sends out email with the link+token to user.
method 1 might be less dificult, maybe doable through a plugin? but it exposes to IDOR: a user could change the event ID in the url, and see information that is reserved to other event users.
method 2 forces me to change/extend my crm, which is at the moment not equipped to use extenal api's.
can anyone see other more tried and tue methods?
thanks for this great SW!
Ciao from Italy