bgermann

I am removing the view because of general security concerns. It had a long standing SQL injection issue and I guess there are more issues with it. With the anchor being shown you actually point out something that could be a cross site scripting issue.

I am sorry, but I do not want to be responsible for such a rotten code base. Actually there are many other areas in cformsII that look very ugly.

The next cformsII version will have to wait some time. Maybe it will happen as late as the WordPress 5 release.

And after all there is https://wordpress.org/plugins/cforms2-old-tracking-db.
If some PHP developer wants to take on the responsibility, he can build upon it and provide the old user interface.

I will see what I can do about better user experience in CFDB.

You would use regular expressions for this. Something like ^.{0,50}$

• This reply was modified 7 years, 7 months ago by bgermann.

Is the CRM on the same toplevel domain as your wordpress installation? Maybe WordPress rewrites the form’s action in this case (What does the HTML source look like?). Or it may be a browser security “feature”. Or you use the current chrome version and do not see the exact URL. Please provide more specific information.

• This reply was modified 7 years, 7 months ago by bgermann.

Or you can update and use https://cfdbplugin.com/ as cformsII’s upload file target. Your files are then put into your database.

The reason for dropping {ID} is that the old tracking DB is removed. I could have used a random ID instead but that would have changed the semantics.

I suggest you do one of the following:

1. Use the emails’ Message-ID.
2. Use a combination of {Date} and {Time}
3. Use an arbitrary string (even “{ID}”) that you replace in a cforms2_admin_email_filter with something. Example code to use in a plugin:

add_filter ( 'cforms2_admin_email_filter', function($email_text) {
  replacement = mt_rand();
  return str_replace('{ID}', $replacement, $email_text);
});

As you cannot see any entries nor the menu item: Do you have cformsII 14.14 from wordpress.org installed or did you install the development version from github.com/bgermann?

That is odd. The entry shows up if the tracking db is present.

If you know how to use a SQL client on your database you can delete the two tables yourself. They are wp_cformssubmissions and wp_cformsdata (wp_ being your installation prefix).
If not you can use “Produce debug output” and copy the text area content. Then use “Uninstalling / Removing cforms” and reenable the plugin. Then use “Produce debug output” and overwrite the text area with the previously copied old settings.