security issues

More
9 years 5 months ago #55413 by chupanibre
Replied by chupanibre on topic security issues
I tried this, but it didn´t work. I set the first question of the second questionnaire as visible question, the question type is "short free text"
I set the end-url as: cape42heidelberg.limequery.org/index.php...&19196X3X10={SAVEDID }

When I start the second survey (using the link provided at the end of the first questionnaire), the first question is not populated with the SAVEDID....
The topic has been locked.
More
9 years 5 months ago - 9 years 5 months ago #55414 by tfj
Replied by tfj on topic security issues
The ID field in LimeSurvey tables is an integer.

What happens when you set 19196X3X10 in your second survey to numerical input question type?

tfj
Last edit: 9 years 5 months ago by tfj.
The following user(s) said Thank You: chupanibre
The topic has been locked.
More
9 years 5 months ago #55426 by Mazi
Replied by Mazi on topic security issues
The URL looks correct. Are both surveys activated?

Best regards/Beste Grüße,
Dr. Marcel Minke
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com
Want to use your survey offline -> www.offlinesurveys.com
The following user(s) said Thank You: chupanibre
The topic has been locked.
More
9 years 5 months ago #55444 by chupanibre
Replied by chupanibre on topic security issues
No, but I turned "Survey preview only for administration users" off....
The topic has been locked.
More
9 years 5 months ago #55456 by tpartner
Replied by tpartner on topic security issues
The URL is correct, I just tried cape42heidelberg.limequery.org/index.php...ang=de&19196X3X10=55 and it correctly populated your first question with "55".

When you try it from your first survey do you see a value for 19196X3X10 appended to the URL or does it just end with "&19196X3X10="?

Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
Official LimeSurvey Partner - partnersurveys.com
The topic has been locked.
More
9 years 5 months ago - 9 years 5 months ago #55457 by tpartner
Replied by tpartner on topic security issues
Ah, and Mazi is correct, the first survey will need to be activated to generate a SAVEDID.

Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
Official LimeSurvey Partner - partnersurveys.com
Last edit: 9 years 5 months ago by tpartner.
The topic has been locked.
More
9 years 5 months ago #55458 by tpartner
Replied by tpartner on topic security issues
Here's a quick test - www.partnersinc.biz/surveys//index.php?s...46&newtest=Y&lang=en

The first survey redirect to the second with the SAVEDID.

Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
Official LimeSurvey Partner - partnersurveys.com
The following user(s) said Thank You: chupanibre
The topic has been locked.
More
9 years 5 months ago #55470 by chupanibre
Replied by chupanibre on topic Aw: security issues
It worked! After activating the first survey I was able to populate the first question of the second survey with SAVEDID...

I think this is an easy and effective way to set up a survey collecting personal data in compliance with rules regarding data protection, thanks a lot for your valuable help!

Best,
Chupa
The topic has been locked.
More
9 years 5 months ago #55488 by Mazi
Replied by Mazi on topic Aw: security issues
You're welcome!

If our hints have been helpful and you enjoy limesurvey please consider a donation to the team .
We do all this in our free time and you don't have to pay a penny for this software.

Without your help we can't keep this project alive.

Best regards/Beste Grüße,
Dr. Marcel Minke
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com
Want to use your survey offline -> www.offlinesurveys.com
The topic has been locked.
More
8 years 3 months ago #76491 by jsmello
Replied by jsmello on topic security issues
Is there an option that stores the information encrypted in the Limesurvey?

THe suggestion in this thread talks about the storage of the some information in a separated (encrypted) database. If I understood right, the user makes a "trigger" to decrypt the data of the limesurvey database?
The topic has been locked.
More
8 years 3 months ago #76495 by tfj
Replied by tfj on topic security issues
If you are referring to my suggestions, there is no trigger. I have written mySQL queries to encrypt confidential fields in our LimeSurvey tables on a scheduled, frequent basis. I use an added field at the end of each table to keep track of which records have already been encrypted.

When required, I have written mySQL decryption queries to decrypt and export to Excel, etc.

None of the above is a feature of LimeSurvey. One of my biggest wishes, though, would be for LimeSurvey to have a built-in feature that encrypts data as they are put in the table, using a seed of my own choosing. For now, though, my method works well enough for us.

tfj
The topic has been locked.
More
8 years 3 months ago #76510 by jsmello
Replied by jsmello on topic security issues
So, let me see if I understood correctly. From time to time you encrypt your limesurvey table using mySQL queries through and, when you need read the data, you decrypt using another mySQL querie written by you.

This solution solves, partially, data storage problems inside the Limesurvey platform.

Tjf, Did you put your solution in the wiki?
The topic has been locked.
More
8 years 3 months ago #76513 by tfj
Replied by tfj on topic security issues
It is much more than "time to time." It is throughout the day, every day, at frequent intervals.

I did not post the solution since:

1) It really has nothing to do (directly) with LimeSurvey; it is totally a mySQL solution

2) There didn't seem to be much interest

3) My queries, by nature, have to remain confidential. I think it may be enough to say that I used the mySQL Encryption and Decryption functions for those individual fields that are confidential. I then put the queries on a schedule. I use Navicat, a gui for mySQL, to make things easier. Any good mySQL reference manual (or Internet search) could explain what I did much better than I could.
The topic has been locked.

Start now!

Just create your account and start using Limesurvey today.

Register now