Page 1 of 1

Password variable not accessible in custom fields

PostPosted: Wed Dec 02, 2015 9:27 am
by ClearCall
I have a link in one of my campaign scripts that works perfectly but the same link in the custom fields does not work. I did some debugging and discovered that the --A--pass--B-- in the link is sent properly in the script tab but is sent as blank in the custom fields tab.
I put the code My user is --A--user--B-- and my pass is --A--pass--B-- in both my campaign script and a list custom field.
The Script tab displayed:
My user is User login and my pass is User password
The Form tab displayed:
My user is User login and my pass is

Why can't I access the password variable in the custom fields?

Re: Password variable not accessible in custom fields

PostPosted: Wed Dec 02, 2015 12:28 pm
by mflorell
Custom fields works completely differently from scripts within the agent interface. The only live variables that are passed are:
$lead_id,$list_id,$uniqueid,$user

And everything is gathered for display from those 4 variables in the functions.php function "custom_list_fields_values"

Also, I would recommend not purposely displaying the user and pass because that is not considered a good security protocol.

Re: Password variable not accessible in custom fields

PostPosted: Thu Dec 03, 2015 12:27 am
by ClearCall
The display of the user and password was for debugging purposes only. What I'm attempting to do is put a hyperlink on the form tab but one of the variables I need to pass is the password for authentication.

Re: Password variable not accessible in custom fields

PostPosted: Thu Dec 03, 2015 9:53 am
by williamconley
ClearCall wrote:The display of the user and password was for debugging purposes only. What I'm attempting to do is put a hyperlink on the form tab but one of the variables I need to pass is the password for authentication.


Don't send the password. Have the user pre-log-in to the other site and store a cookie (with a long expiration time). That will avoid the challenge of the missing password and continue to provide security.

If you MUST have the password, have the URL link to a php page on the vicidial server, use the "user" to acquire the password (in the background), and then bounce the browser (forward) to the real URL after. Still not a good idea to send the password even if you use SSL, but if you at least use SSL you'll probably be OK.