View Issue Details

IDProjectCategoryView StatusLast Update
07354Feature requestsStatisticspublic2009-10-20 19:14
Reporterkalimu Assigned To 
Status acknowledgedResolutionopen 
Summary07354: Some authorization option necessary to see public statistic
DescriptionIf you want to show statistic on-line page to client you could send him a link to public statistic, but this link can be guessed by anybody who knows LimeSurvey script....
Additional InformationA possible solution: Any simple authentication option could be suffice
Maybe some optional password in public-statistic page URL (as URL parameter)
TagsNo tags attached.




2009-10-28 16:08

partner   ~24311

When calling the public statistics an ID is passed. This 5 digit ID is hard to guess so there is only a very low risk.

Furthermore you can protect the /limesurvey/statistics_user.php file by configuring your webserver accordingly.

Issue History

Date Modified Username Field Change