View Issue Details

This bug affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
07354Feature requestsStatisticspublic2021-11-08 07:19
Reporterkalimu Assigned Togalads  
PrioritynormalSeverityfeature 
Status closedResolutionfixed 
Summary07354: Some authorization option necessary to see public statistic
Description

If you want to show statistic on-line page to client you could send him a link to public statistic, but this link can be guessed by anybody who knows LimeSurvey script....

Additional Information

A possible solution: Any simple authentication option could be suffice
Maybe some optional password in public-statistic page URL (as URL parameter)

TagsNo tags attached.
Bug heat4
Story point estimate
Users affected %

Users monitoring this issue

There are no users monitoring this issue.

Activities

Mazi

Mazi

2009-10-28 16:08

updater   ~24311

When calling the public statistics an ID is passed. This 5 digit ID is hard to guess so there is only a very low risk.

Furthermore you can protect the /limesurvey/statistics_user.php file by configuring your webserver accordingly.

galads

galads

2021-11-08 07:18

reporter   ~67158

Dear kalimu ,

Thank you for suggesting a feature.

However, we will not be picking this up because the use case is too specific or the use case might not fit to the latest versions of LimeSurvey.

Other reasons why the feature is dropped could also be, it has been implemented already.

Please check on the latest versions and if the issue still exists, feel free to re-open the report.

kind regards,
galads

Issue History

Date Modified Username Field Change
2021-11-08 07:18 galads Note Added: 67158
2021-11-08 07:18 galads Bug heat 2 => 4
2021-11-08 07:19 galads Assigned To => galads
2021-11-08 07:19 galads Status acknowledged => closed
2021-11-08 07:19 galads Resolution open => fixed