[NGO] Database Backed Forms - forked from: What NGOs need in a website [checklist]

[Martin Aspeli]

I'm just thinking ... PloneFormMailer is just (CMF?)Formulator + some Plone
UI + a mail handling script, right?

Perhaps we could use the same infrastructure or generalise it out so that
the "mailer" part was plugged in with the PloneFormMailer product but all
the form-building happened either with plain CMFFormulator or some higher
level Plone wrapper (if that's really needed?)? It seems silly if a form
mailer instance has a bunch of options about sending email that's then
essentially irrelevant when you've customised it to save data instead.

It may also be interesting to build some custom storage; for example, the
FormSaver could be an object that saved all the responses in a BTree or so,
allowed some XML and CSV export, and had a browser for responses.

More daydreaming I know, but it'd be damned useful.

Martin

On 6/1/06, Reinout van Rees <reinout at vanrees.org> wrote:
>
> David Bain wrote:
> > Common enough for me have done it twice in a month.
> > The proxy role is only so that the data gets written to the private
> > folder :)
>
> It's the combination between "everyone can fill in the form" and "we
> push it through a script with Manager rights". There was a bugfix 2
> weeks ago: if you really set yourself to it you could use
> ploneformmailer to send spam... Only one person was bitten by it, but
> still.
>
> Perhaps you could make the private folder owned by one specific user and
> run the script proxied as that user? Then at least the rest of the site
> would be safe.
>
> Ah well, I'm nitpicking here: thanks for figuring it out, in 99.8 of the
> cases it won't be any problem :-)
>
> Reinout
>
> --
> Reinout van Rees                            r.van.rees at zestsoftware.nl
> http://vanrees.org/weblog/                     http://zestsoftware.nl/
> The most absolute lie is the presentation of an irrefutable fact based
> on unassailable numbers -- L.E. Modesitt jr., Gravity dreams
>
>
>
>
> _______________________________________________
> NGO mailing list
> NGO at lists.plone.org
> http://lists.plone.org/mailman/listinfo/ngo
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.plone.org/pipermail/plone-ngo/attachments/20060602/3547fc35/attachment-0002.html>