Mautic Community Forums

Data & Security when updating prepopulate fields

Hi All!



I would like to pre-populate lead data in a form to allow leads to confirm/modify their data.



The scenario is as follows (something like you describe in https://www.mautic.org/community/index.php/307-using-mautic-for-event-registration/0):


  1. I send a mail to a lead with some data
  2. The user clicks in a button to go to a landing page with a form
  3. The form is auto-filled with his data
  4. The user can update his data (email, tel, address…)



    The problem is about security: if a lead knows the email addresses of another leads he is able to modify the data of these another leads.



    I’m not sure how to manage this issue, I tried making a new field (ID number) that is Unique Identifier as well as Email is and adding it as a hidden field in the form, but my security problem persists.



    Do you have any idea about how to manage this to ensure that a lead only is able to modify his own data?



    Thanks

@seti I take Mautic as a marketing automation tool which is able to cooperate with other tools for specific tasks like CRM, CMS and so on. You can use some CMS like WordPress or Joomla to let leads to register and keep their data securely updatable after login and send the data on form submit to Mautic.

Hi All!

I would like to pre-populate lead data in a form to allow leads to confirm/modify their data.

The scenario is as follows (something like you describe in https://www.mautic.org/community/index.php/307-using-mautic-for-event-registration/0):

  1. I send a mail to a lead with some data
  2. The user clicks in a button to go to a landing page with a form
  3. The form is auto-filled with his data
  4. The user can update his data (email, tel, address…)

The problem is about security: if a lead knows the email addresses of another leads he is able to modify the data of these another leads.

I’m not sure how to manage this issue, I tried making a new field (ID number) that is Unique Identifier as well as Email is and adding it as a hidden field in the form, but my security problem persists.

Do you have any idea about how to manage this to ensure that a lead only is able to modify his own data?

Thanks

Question, did you manage to get the data shown as pre-populated data in a landing page? I am not technical and wondering if a non technical guy like me can get that working

Thanks for your answer

Of course, you can manage that without technical skills, it’s easy!

Just follow the steps described by Alan in this post: https://www.mautic.org/community/index.php/307-using-mautic-for-event-registration/0):