|
Susan
|
December 19, 2012 at 9:23 am
My organization is currently looking to transition from RegOnline to a WordPress event registration solution. One of the features we have used extensively is the ability for registrants to login and edit their own registration details. Is this possible with Event Espresso? Thanks in advance for your help!
|
|
Josh
|
December 19, 2012 at 9:47 am
Hi Susan,
Thanks for your question. This is possible with Event Espresso, but it works differently in that users do not log in to edit their registration details. Instead, they can click a link that’s in the confirmation email they get after registering that will take them directly to a page where they can edit their registration details.
|
|
Susan
|
December 19, 2012 at 12:27 pm
Thanks Josh,
I experimented with this feature in the Test Drive, and it seems to work well. Is there any security risk with this editing capability not being password protected?
|
|
Josh
|
December 19, 2012 at 3:19 pm
Hi Susan,
I don’t claim to be a security expert, but I don’t see a risk with that. Someone wanting to edit someone else’s attendee info would need to know the page ID of the registration page, the ID of the event, the 18 digit unique registration ID, and the simple registration ID then string that all together to get that URL. If you’re one character off, it sends you to an error page.
In the past people have asked how to shorten the registration ID and make it follow a sequence. I’d say that by keeping the registration ID at a longer length and randomly generated keeps that URL from being harder to guess.
|
