Password variable not accessible in custom fields

All installation and configuration problems and questions

Moderators: gerski, enjay, williamconley, Op3r, Staydog, gardo, mflorell, MJCoate, mcargile, Kumba, Michael_N

Password variable not accessible in custom fields

Postby ClearCall » Wed Dec 02, 2015 9:27 am

I have a link in one of my campaign scripts that works perfectly but the same link in the custom fields does not work. I did some debugging and discovered that the --A--pass--B-- in the link is sent properly in the script tab but is sent as blank in the custom fields tab.
I put the code My user is --A--user--B-- and my pass is --A--pass--B-- in both my campaign script and a list custom field.
The Script tab displayed:
My user is User login and my pass is User password
The Form tab displayed:
My user is User login and my pass is

Why can't I access the password variable in the custom fields?
VERSION: 2.14-620a BUILD: 170623-2142
Asterisk: 1.8.32.0-vici
Installed from Vicibox iso.
Vicibox Redux Ver 6.0.2-140825
Open Suse Leap 42.3
ClearCall
 
Posts: 164
Joined: Fri Dec 03, 2010 12:21 pm

Re: Password variable not accessible in custom fields

Postby mflorell » Wed Dec 02, 2015 12:28 pm

Custom fields works completely differently from scripts within the agent interface. The only live variables that are passed are:
$lead_id,$list_id,$uniqueid,$user

And everything is gathered for display from those 4 variables in the functions.php function "custom_list_fields_values"

Also, I would recommend not purposely displaying the user and pass because that is not considered a good security protocol.
mflorell
Site Admin
 
Posts: 18387
Joined: Wed Jun 07, 2006 2:45 pm
Location: Florida

Re: Password variable not accessible in custom fields

Postby ClearCall » Thu Dec 03, 2015 12:27 am

The display of the user and password was for debugging purposes only. What I'm attempting to do is put a hyperlink on the form tab but one of the variables I need to pass is the password for authentication.
ClearCall
 
Posts: 164
Joined: Fri Dec 03, 2010 12:21 pm

Re: Password variable not accessible in custom fields

Postby williamconley » Thu Dec 03, 2015 9:53 am

ClearCall wrote:The display of the user and password was for debugging purposes only. What I'm attempting to do is put a hyperlink on the form tab but one of the variables I need to pass is the password for authentication.


Don't send the password. Have the user pre-log-in to the other site and store a cookie (with a long expiration time). That will avoid the challenge of the missing password and continue to provide security.

If you MUST have the password, have the URL link to a php page on the vicidial server, use the "user" to acquire the password (in the background), and then bounce the browser (forward) to the real URL after. Still not a good idea to send the password even if you use SSL, but if you at least use SSL you'll probably be OK.
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: Vicidial Agent Only Beep - Beta
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 20258
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)


Return to Support

Who is online

Users browsing this forum: Google [Bot] and 105 guests