Filter Failed - Data Suppressed

[Tower Theatre]

From time to time we get a form submitted where the encoding fails. We get an error message, but (because the data was encoded) the error says something like "Filter failed : data suppressed to protect user information". This means that we have no idea whether it's a genuine problem, or is perhaps just a spam form.
Is it possible to set the error message such that basic information does get fed back (e.g. just name + email address?).

[russellr]

Hi,

Yes, we really did take the most secure route there - showing none of the fields!

I certainly can't see any problems with showing the realname and email fields in these alerts.

As you're aware, we don't want to show the other fields because they might contain credit card information.

Please allow a few days to a week for me to get this enhancement complete.

Do you know which version of FormMail you're currently running?

It would be good to upgrade to the latest 7.13 release now, rather than wait until this new version I'll release.

That way, any problems you encounter with the later version will be resolved before this new version. Note that if you use the Upgrade Wizard and you haven't changed any of the FormMail code (outside the configuration section), you should experience no problems in upgrading.

It's important that you test though and keep a copy of your original FormMail so you can immediately go back to it.

[Tower Theatre]

Thanks - that would be really useful.

We were using 7.12, but I have just upgraded to 7.13.

Laurence

[Donzilla]

Hi Russell, Lawrence:

The scenario I have requires a similiar ability of formmail...

I have a formmail with encryption set up for a client who normally decodes the messages with her own private key (which I do not have access to). However, if the form fails, I am responsible for fixing it.

In this case, it seems to make sense to have the alerts not pass through the encryption filter, as per the defaults.

Thanks for all your help!

The simple way, I suppose, would just be to obtain a copy of her key, but that is not a good option for obvious reasons.

Cheers!


(By the way, you have created an excellant product. It took me a bit to realize that the server I was installing it on was SunOS, but after I figured that out everything was peachy.)

[russellr]

Hi,

Well we hope to get the improvement done this week.

Of course, you'll still only get the information that does not need to be secret, and, as far as FormMail is concerned, that's a very limited set of fields.

Stay tuned....

[Donzilla]

Thanks -- You are truly amazing, sir.

[russellr]

Hi,

OK, version 7.14 is now available for you to upgrade.

It solves this problem by only filtering (encrypting) the fields in alert messages that are specified in the "filter_fields" special field.

If you have no "filter_fields" specification, then FormMail simply puts email and realname in clear text and the rest are filtered.

Please let me know how you go with it.

[Donzilla]

Thanks, Russell.

I am using 7.14 now and it looks good so far. I'm keeping the name, email, and phone fields out of the encryption so that in the off chance that my client deletes her private key or forgets her password, we will still be able to contact the customers who used the form..!

So far, so good.

Cheers,
Don