Timeline for Implementing a secure confirmation page for an entity form (D8)
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 3, 2016 at 7:39 | comment | added | Hendrik | So, the key point here is to use session variables in order to restrict access to the confirmation page and related data, correct? User ID won't work, since I have to address anonymous visitors, too, but I could save the ID of the newly created entity in a session variable. Would you consider that safe? | |
| Sep 26, 2016 at 17:39 | comment | added | Hendrik | Sounds good so far - so what do you mean by 'extra submitter'? Do you mean create a user account? | |
| Sep 26, 2016 at 8:35 | history | answered | Net | CC BY-SA 3.0 |