Forum Replies Created
-
Posts
-
If you want to view this content, you need to buy any product.
If you want to view this content, you need to buy any product.
If you want to view this content, you need to buy any product.
If you want to view this content, you need to buy any product.
If you want to view this content, you need to buy any product.
Thanks. You can send it to stephen AT stephensherrardplugins.com
For the first part, I would argue how much of a “security” risk that is, since that hidden field is ONLY there if the user is logged in when filling out the sign-up form. So, unless you are a site that allows anyone to register, with no checks for spammers, it would not be an issue. Beyond that, the name and phone info is ONLY updated if it was previously NOT set for that particular user. So, no, a malicious user could not use it to change the name or phone number of somebody who already has that info set in their profile. Plus, everything is validated before the form is submitted, and then sanitized before the info is saved, so, worst case, if you allow malicious users to register on your site, and they can guess the user id of another user who doesn’t have that info already in their profile, they can add a fake name or phone number to that other user’s profile, which would never be shown to the public anyway in most WordPress setups. They can’t utilize that for any kind of malicious code.
For the second part, I’m happy to accept code additions & contributions to the project, especially since I have pretty much stopped all development on these free plugins, with the exceptions of bug & compatibility fixes.
Thanks for letting me know… nothing major or showstopping, but I will add a check to see if that isset first so that notice doesn’t show up (will only show if debug is on, as it’s not a fatal error that will cause any issues).
If you want to view this content, you need to buy any product.
Jennifer:
Yes, admin can sign-up people from the front-end. In fact, any one who has access to that form can sign-up any body.
However, if admin, or any other user, is logged in when they sign someone else up, the sign-up will get associated with the person who is logged in (WP user ID is saved in the signup table). That would be fine if the people don’t have their own accounts and you aren’t allowing them to clear their own signups. If, however, you want the signup associated with somebody else’s account (so they can see their signups in the list and clear themselves), then the person doing the signing-up should be logged OUT of the site when doing the sign-up. In that case, my plugin will try to find a WordPress user match from the entered email, and associate that signup with that user (if a match is found). If you are hiding sign-up sheets from the public, you may need to temporarily allow public to see them while signing up other users so that you can sign-up others while logged out of the site.
As far as entering/editing signups from the admin side, there is nothing in the plugin to do that at this point, and no current plans on adding any new features at this time unless some people want to chip in to cover the development time. Signups can already be entered by admin, or anyone else, as described above. If you make a mistake, you can clear the signup and re-enter it, or use PHP MyAdmin to edit the info in the signup table. Sure, it’s not idea, and would maybe be nice to have admin be able to add/edit from the backend, but this plugin started its life as another plugin which didn’t have those features, and it wasn’t something our PTA chair people needed, so I didn’t bother to add that.
Yes, you can already do that with the View Sign-up links for a sheet from the admin dashboard, and then there will be a CSV export button at the bottom of the page to allow you to export all the sign-ups for that sheet.
Please read the documentation:
https://stephensherrardplugins.com/docs/pta-volunteer-sign-up-sheets-documentation/Administration – All Sheets
Once you have some sheets added, there are several things you can do from the Admin section of this plugin. On the All Sheets page you will see a list-table of all sheets currently in the system, along with some basic info for each.
If you hover over the title of any sheet, you will see the following option links:
View Sign-ups — Takes you to a detailed list table with a list of all volunteers who have signed up, along with their full contact info, a link to clear each signup, and a button to export the signups as an Excel ready CSV file.
Edit Sheet — Takes you to the edit sheet page for that event (see above)
Edit Tasks — Takes you to the edit tasks page for that event (see above)
Copy — Makes a copy of the sheet, appending “copy” to the name. Useful if you have a couple of events that have very similar requirements, as it will copy all sheet and tasks you have entered, and then you can change the name and any other details on the copy you created for the second event.
Trash — Moves the sheet to the trash, but does not permanently delete it (click on trash at the top of the table to view trashed sheets and permanently delete them)Visibility — There is a “Visible” column for each sheet on the All Sheets list table. If a sheet is hidden from the public, you will see a red “NO” listed in the column. If you go to the public side, those sheets will not show up in the main volunteer page list or in the widgets unless you are logged in as admin or volunteer sheet manager (in which case you will see the sheet listed, but there will be some red text below it to remind you that the sheet is hidden from the public). Click on “Yes” or “NO” to toggle the visibility of a sheet. It may be useful to have a sheet hidden while you are getting it set up and testing things out, or if you don’t want to make sign-ups available until a certain date.
Bulk Actions — From the main All Sheets list you can use bulk actions to trash or toggle the visibility of several sheets at once. While you are in the trash bin, you can use bulk actions to permanently delete or restore multiple sheets at once.
View Sign-ups Page (admin)
This is where you can view all your detailed sign-up information for an event. Full name and contact information is shown for each volunteer, and there is a “Clear Spot” link if you need to remove a volunteer from a spot. At the bottom of the list table is an “Export Sheet as CSV” button that will export that sign-up information to an Excel ready CSV file.
This content is restricted to buyers of:
This content is restricted to buyers of:
This content is restricted to buyers of:
This content is restricted to buyers of: