• Resolved sunrises

    (@sunrises)


    Another question: If a petition has already been signed with a certain e-mail address, the CSS class “dk-speakout-response-error” can be used to recognize that a person has participated in the petition after entering the e-mail address, by studying the page source text. Could this be switched off?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author SpeakOut!

    (@123host)

    tell me why you would want to do this. The database can’t hold duplicate email addresses so it seems to me that an error if it is a duplicate email address is useful.

    Thread Starter sunrises

    (@sunrises)

    The e-mail address should not be entered twice in the database, but the process should be canceled without the person signing the petition noticing.

    The reason is data protection. It should not be possible to find out who has already signed the petition with their e-mail address with malicious intent.

    Plugin Author SpeakOut!

    (@123host)

    It should not be possible to find out who has already signed the petition with their e-mail address with malicious intent.

    Aha…that makes sense.

    This is not possible at the moment, but given that SpeakOut! is used on sites that might be seen as controversial, I can see the value.

    However, if an email address succeeds, a “thank you” screen is shown. If an address fails silently, it will still indicate that the address exists in the database as there will be no “thank you”.

    If that doesn’t bother you, you could always customise or delete the CSS class.

    Thread Starter sunrises

    (@sunrises)

    Yes, with CSS it is possible to adapt the appearance of the success message to the error message. In order to better comply with European data protection laws, it would still be good if there was a solution on the plugin side, so that it is not possible to read whose e-mail address is in the database from the page source code.

    Another suggestion for improvement – also due to data protection, because the user’s consent is required when transferring data to the USA – would be to offer a PHP-generated captcha as an alternative to Google’s captcha: https://code.tutsplus.com/build-your-own-captcha-and-contact-form-in-php–net-5362t

    Thank you for developing this great plugin!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Suppress error message if petition has already been signed’ is closed to new replies.