[TYPO3] comments and fe users

Dmitry Dulepov dmitry.dulepov at gmail.com
Tue Sep 30 18:05:08 CEST 2008


Hi!

JoH asenau wrote:
> Checking the code of the comments extension it seems you have to use
> "processSubmission" to get additional Stuff into the $record Array. IMHO the
> easiest way would be to just use the new field name as an input field in the
> HTML Template, prefilled with TypoScript and automatically saving the
> incoming values together with the rest of the form, but this seems not to be
> possible with current comments plugin.

No, not possible. It saves only known fields. And the proposed solution will be really insecure: it will be possible to spoof identity. Nothing will prevent a hacker from putting any user id into the form.

-- 
Dmitry Dulepov
My TYPO3 book: http://www.packtpub.com/typo3-extension-development/book
In the blog: http://typo3bloke.net/post-details/duplicate_content_with_realurl/


More information about the TYPO3-english mailing list