×
This forum has been locked. Please submit new Feature Requests on GitHub: github.com/Jensen-Technologies/component-creator-issues/issues
(added) Filters in frontend
John-Paul Takats
New Member
Posts: 6
10 år 2 månader sedan - 10 år 2 månader sedan #373
av John-Paul Takats
Svar från John-Paul Takats i ämnet Filters in frontend
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Example: If I have a component named helloworld with a table called userstable. If I install the component and visit this url on my site I am able to view the whole table as a guest by using a link like "www.test.com/index.php?option=com_helloworld". I am able to see this table whether or not there is a menu item corresponding to it. If I create a menu item I can set it to be "registered" view only, but even when visiting it I am able to see the table, i just get a notice saying I don't have permission, even though it still displays.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
Last edit: 10 år 2 månader sedan by John-Paul Takats.
Be Logga in eller Skapa ett konto ansluta till konversationen.
Pedro
New Member
Posts: 12
10 år 2 månader sedan #374
av Pedro
Svar från Pedro i ämnet Filters in frontend
Hi John, I guess this is something that happens with any component out there and it's something to deal in each extension by itself
Be Logga in eller Skapa ett konto ansluta till konversationen.
Andres Maeso
Platinum Member
Posts: 338
10 år 2 månader sedan #383
av Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Den här e-postadressen skyddas mot spambots. Du måste tillåta JavaScript för att se den.
Svar från Andres Maeso i ämnet Filters in frontend
Hi everybody!
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
The feature is online!
I wanted to tell you before we make an official announcement because I guessed you need it asap. Feel free to report any bugs via contact form so they are fixed immediately www.component-creator.com/en/contact
One thing I'd like to point out well you are developing this is potential security risk i noticed of adding the frontend view. I enabled frontend list / editing for a user list table I have. I noticed that I am able to view the list view as a guest.
So unless there is some sort of permissions built into the frontend view I would caution people that if they use a frontend view be careful (if it has sensitive info) it will be visible to guests if they can guess the name of the component. Obviously this component creator is geared towards developers so one could put in there own permissions, and block the view... it just gets tricky sometimes when I modify the base component to much and want to reinstall.
I think this may be a different feature request, John. If there's more people that find that useful, we will gladly work on implementing it. Would you mind to write a different post?
Best regards,
Andrés.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Den här e-postadressen skyddas mot spambots. Du måste tillåta JavaScript för att se den.
Be Logga in eller Skapa ett konto ansluta till konversationen.
John-Paul Takats
New Member
Posts: 6
10 år 2 månader sedan - 10 år 2 månader sedan #384
av John-Paul Takats
Svar från John-Paul Takats i ämnet Filters in frontend
Should the filters appear automatically in a frontend list view? I am not seeing them at the moment, i'll look into it
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
EDIT - oops noticed you said to file any bugs in the contact us, i will respond once i do a bit more testing... but it looks like the default_filter view that was added was never included anywhere to be displayed alongside other default view. So all I see is default with no filtering.
Last edit: 10 år 2 månader sedan by John-Paul Takats.
Be Logga in eller Skapa ett konto ansluta till konversationen.
Andres Maeso
Platinum Member
Posts: 338
10 år 2 månader sedan #386
av Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Den här e-postadressen skyddas mot spambots. Du måste tillåta JavaScript för att se den.
Svar från Andres Maeso i ämnet Filters in frontend
Hi John-Paul
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
You will need to add some drop-down fields like JList, Radio buttoms or JCategory to see the filters.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Den här e-postadressen skyddas mot spambots. Du måste tillåta JavaScript för att se den.
Be Logga in eller Skapa ett konto ansluta till konversationen.
John-Paul Takats
New Member
Posts: 6
10 år 2 månader sedan #387
av John-Paul Takats
Svar från John-Paul Takats i ämnet Filters in frontend
Andres, there was one issue in the first release that I filed a ticket for that it looks like Victor (on your team) corrected this morning. The filtering is displaying now, however there was an issue with the values - I put in another ticket for that earlier.
Thanks,
JP
Thanks,
JP
Be Logga in eller Skapa ett konto ansluta till konversationen.
Sidan laddades på: 0.059 sekunder