[ZendTo] Re: password protection

[Jules]

On 02/07/2012 17:38, Papp Tamas wrote:
> On 07/02/2012 05:49 PM, Jules wrote:
>>
>> You can edit the email message template so that it doesn't send the 
>> Claim ID and Passcode both in the same email. Then just note down the 
>> Passcode from the results of doing the drop-off, and send that value 
>> by some other method, such as a phone call. Then they can do a manual 
>> pick-up from the menu, rather than clicking on a link in an email.
>
> Yes, this would be fine, if there were password protected download links:)
My point was that you don't have to use email to send the Claim ID and 
Passcode at all, that's merely how it works by default. If you edit 
/opt/zendto/templates/dropoff_email.tpl you can change the link to just 
point to the main menu or the "Pick-up" page, and just give them the 
Claim ID and ask them to call for the Passcode. Then they just copy and 
paste the Claim ID into the Pick-up page, and type in the Passcode that 
they get over the phone, and they can download their files.

It doesn't have to be an email link doing it all, that's entirely up to 
you. That's merely a convenient method that I thought would be okay for 
most people. If you want to do something else more secure, then feel free.

You don't have to edit *any* code to change this, just the template from 
which the email message is constructed.


Jules

-- 
Julian Field MEng CITP CEng
www.Zend.To

Follow me at twitter.com/JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

'It's okay to live without all the answers' - Charlie Eppes, 2011
'All programs have a desire to be useful' - Tron, 1982
'That is the land of lost content,
  I see it shining plain,
  The happy highways where I went,
  And cannot come again.' - A.E. Houseman

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20120703/77bcca87/attachment.html