Forums / General Questions / Security question and social buttons

Security question and social buttons

Locked

Views: 831

Results 1 to 9 of 9
This thread is locked. New replies are disabled.
9 Dec 2010, 11:55 PM
#1
buildingblocks avatar

buildingblocks

Totally Zenned

Join Date:
Jun 2008
Posts:
629
Plugin Contributions:
0

Security question and social buttons

In the tutorials for security measures step 10 says

  1. Disable "Allow Guest To Tell A Friend" feature

You may wish to go to Admin > Configuration > Email Options > Allow Guest To Tell A Friend and set the option to false. This will prevent non-logged-in customers from using your server to send unwanted email messages.

On some websites folks are adding addthis social button groups to their product pages. The group of buttons includes an email icon with the ability for people to send emails to others from the product page. The email form has fields for the senders and recipients email address. Is this really ok to have on our product pages?

10 Dec 2010, 12:35 AM
#2
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Security question and social buttons

Is this really ok to have on our product pages?
I would edit the code for that module and comment out/remove that ability

Zen-Venom Get Bitten

10 Dec 2010, 1:19 AM
#3
buildingblocks avatar

buildingblocks

Totally Zenned

Join Date:
Jun 2008
Posts:
629
Plugin Contributions:
0

Re: Security question and social buttons

that's the feeling I was having about it. I put it on my site earlier today too and then it occurred to me about the email which couldn't be completely removed. I'll look for something else.

Thanks

10 Dec 2010, 1:21 AM
#4
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Security question and social buttons

it occurred to me about the email which couldn't be completely removed

?????

It was coded so should be able to un-coded

Zen-Venom Get Bitten

10 Dec 2010, 1:50 AM
#5
buildingblocks avatar

buildingblocks

Totally Zenned

Join Date:
Jun 2008
Posts:
629
Plugin Contributions:
0

Re: Security question and social buttons

Part of the code is a "bookmark/share this" widget called by javascript from someone else's server so the email can't be removed from the widget.

10 Dec 2010, 1:53 AM
#6
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Security question and social buttons

called by javascript
Edit the .js and make it only
bookmark this

Zen-Venom Get Bitten

10 Dec 2010, 2:06 AM
#7
buildingblocks avatar

buildingblocks

Totally Zenned

Join Date:
Jun 2008
Posts:
629
Plugin Contributions:
0

Re: Security question and social buttons

This is the code I'm talking about, the script portion

<!-- AddThis Button BEGIN -->
<div class="addthis_toolbox addthis_default_style ">
<a class="addthis_button_facebook_like" fb:like:layout="button_count"></a>
<a class="addthis_button_tweet"></a>
<a class="addthis_counter addthis_pill_style"></a>
</div>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4d017efc1036d50b"></script>
<!-- AddThis Button END -->
10 Dec 2010, 4:38 AM
#8
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: Security question and social buttons

I see - - you do not have the js locally
But you can grab it here - remove space
http: //s7.addthis.com/js/250/addthis_widget.js

Zen-Venom Get Bitten

10 Dec 2010, 1:02 PM
#9
buildingblocks avatar

buildingblocks

Totally Zenned

Join Date:
Jun 2008
Posts:
629
Plugin Contributions:
0

Re: Security question and social buttons

Thanks! :smile: