Not signed in (Sign In)

Vanilla 1.1.5a is a product of Lussumo. More Information: Documentation, Community Support.

Support Requests: IP filtering for forms

Bottom of Page

1 to 10 of 10

  1.  
  1.  
    Has IP FIltering been discussed as a new feature? In other words for a Pro account one could specify the form in question could only be viewed by certain IP ranges? This would be a big win if that feature was offered. Companies who use the Salesforce connector could make more use of FormAssembly for the risk of data that "shouldn't be seen by the public" would be greatly reduced.
    • CommentAuthordbuschho
    • CommentTimeOct 13th 2011
     
    Hello Martin,

    We've put authentication mechanisms on the near term road map. I've add this to the list of possible authentication mechanisms, ( like password protected forms and like ).

    To keep the developers motivated, please feel free to add it to our uservoice page and upvote it.

    Drew
    FormAssembly.com Support
  3.  
    Drew,
    I was shown a method to display an IP on the form. I have a test form to demonstrate:
    http://www.tfaforms.com/222130

    My question is this:
    Can I use a similar method to redirect to a different form when the IP does not match a whitelist?
    • CommentAuthordbuschho
    • CommentTimeOct 27th 2011
     
    Sure Martin, though of course it'd be only javascript based ... so fairly insecure.

    A script like:

    <script>
    var my_ip = ... ;
    var whitelist = array("192.168.0.1","192.168.0.2","192.168.0.3");

    var pass = false;
    for( var i =0; i<whitelist.length; i++){
    if(my_ip == whitelist[i]){
    pass = true;
    break;
    }
    }

    if(!pass){
    window.location = "failure_url";
    }
    </script>

    I'm a little off my game today ... might be a better way to do that array checking, but the above should work I think.
  5.  
    I know it is insecure but something is better than nothing. I know you have IP filtering on the roadmap but is there an ETA on when this will be available?
  6.  
    any news on this?
    • CommentAuthordbuschho
    • CommentTimeDec 1st 2011
     
    Nope, sorry Martin. We're looking at adding authentication and authorization to forms, but don't have anything we'd care to show yet.
  8.  
    Is there a way I can be told privately what you have in mind? This is a big issue on my end and I have folks asking questions. I know you said "authentication and authorization" but this is very vague. Basically my $64,000 question is this: Will IP filtering be used? It is a straight up or down for me and the issues I'm having with security. If yes, then great. If no, then I'm in a bit of a spot.
    •  
      CommentAuthorcedsav
    • CommentTimeDec 9th 2011
     
    Hi Martin, I'll email you separately to discuss this. Thanks for you feedback.

    Cedric
  10.  
    THANK YOU!

1 to 10 of 10

  1.