View Issue Details

This bug affects 1 person(s).
 8
IDProjectCategoryView StatusLast Update
09862Bug reportsSurvey participants (Tokens)public2017-07-14 00:45
Reporterfairsay Assigned ToDenisChenu  
PrioritynormalSeveritypartial_block 
Status closedResolutionfixed 
Product Version2.06+ 
Fixed in Version2.06+ 
Summary09862: Invitations substitute wrong token into barebone URL
Description

I'm inviting people to a survey and have embedded the URL in the code using:
<a href="@@SURVEYURL@@">

Individual invites seem OK, but invites to multiple people seem to substitute the same token for all recipients.

The result is when people click through, they all see (and potentially edit) the same survey which then results in over-writing of data.

Steps To Reproduce

1) Setup survey which requires a token table and allows people to update/edit responses
2) Populate the tokens table with multiple records and generate tokens
3) Setup an invite HTML email using <a href="@@SURVEYURL@@">
4) Invite a group of people

What you should see (if this can be replicated) is that everyone has the same token.

TagsNo tags attached.
Bug heat8
Complete LimeSurvey version number (& build)150731
I will donate to the project if issue is resolvedNo
BrowserChrome 44.0.2403.157 (64-bit)
Database type & versionMySQL 5.1.39 fork (InfiniDB)
Server OS (if known)Linux
Webserver software & version (if known)Apache
PHP Version5.5.28

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2015-09-08 17:41

developer   ~33073

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&amp;id=15878

DenisChenu

DenisChenu

2015-09-08 17:44

developer   ~33074

Thanks.

Actually not needed for develop.

fairsay

fairsay

2015-09-08 20:49

reporter   ~33080

Good job! I just applied the patch to tokens.php and tested it - and it all works properly again.

c_schmitz

c_schmitz

2015-09-30 11:01

administrator   ~33226

Version 2.06+ Build 150930 released

blocka

blocka

2017-07-14 00:45

reporter   ~44083

I think I've encountered something similar. Running LS version 2.67.1 build 170626... I've posted details in the forums. See :

https://www.limesurvey.org/forum/installation-a-update-issues/112062-participant-sent-wrong-token#156828

Related Changesets

LimeSurvey: master ec0cb887

2015-09-08 15:41:06

DenisChenu

Details Diff
Fixed issue 09862: Invitations substitute wrong token into barebone URL
Dev: Replace in modsubject not in $sSubject array (used for each token)
Affected Issues
09862
mod - application/controllers/admin/tokens.php Diff File

Issue History

Date Modified Username Field Change
2015-09-02 13:38 fairsay New Issue
2015-09-08 17:29 DenisChenu Assigned To => DenisChenu
2015-09-08 17:29 DenisChenu Status new => assigned
2015-09-08 17:39 DenisChenu Summary Invitations substitute wrong token into the URL => Invitations substitute wrong token into barebone URL
2015-09-08 17:41 DenisChenu Changeset attached => LimeSurvey master ec0cb887
2015-09-08 17:41 DenisChenu Note Added: 33073
2015-09-08 17:41 DenisChenu Resolution open => fixed
2015-09-08 17:44 DenisChenu Note Added: 33074
2015-09-08 17:44 DenisChenu Status assigned => resolved
2015-09-08 17:44 DenisChenu Fixed in Version => 2.06+
2015-09-08 20:49 fairsay Note Added: 33080
2015-09-30 11:01 c_schmitz Note Added: 33226
2015-09-30 11:01 c_schmitz Status resolved => closed
2016-12-08 10:39 c_schmitz Category Tokens => Survey participants (Tokens)
2017-07-14 00:45 blocka Note Added: 44083