Page 1 of 1

Privacy Policy acceptance at registration

Posted: Mon May 14, 2018 7:30 pm
by tempuser
Hello,

I noticed that users are able to register without clicking the accept privacy policy checkbox, although the setting of 'Privacy Policy MUST be accepted' is set to true. I confirmed this from the 'privacy_policy' column database in the temp users table, the value is '0' for some users in this table.

What is the fix of this bug?

Thanks.

Re: Privacy Policy acceptance at registration

Posted: Mon May 14, 2018 7:46 pm
by alfa24
Step to reproduce? Details please

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 9:57 am
by max
Hello,
I tried to reproduce what you describe on a Forma 1.4 and on a Forma 2.0. In both cases, if you don't accept the privacy policy, you are correctly shown an alert (you must accept the privacy policy) and you are NOT registered.

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 10:24 am
by tempuser
Ok Max, I also tested it upfront and was fine, but I don't know how registrants were entered in the database with '0' value in the 'privacy_policy' column? that's why I assumed it somehow doesn't work appropriately for some people, or otherwise how did this happen?

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 10:36 am
by max
I don't know about the db, but since the functionality works correctly I am moving this thread to a different forum.

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 11:45 am
by alfa24
The field value is set by setAcceptingPolicy function in /appLms/models/PrecompileLms.php

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 2:00 pm
by canelli
I think that some users was able to skip the acceptance of the privacy polices .
There are some not ordinary navigation path that can produce this behavior . It's a know bug (hard to reproduce)

We are working to fix the problem in the 2.0 release . We are also working for enanchements of the privacy policies feature

Re: Privacy Policy acceptance at registration

Posted: Tue May 15, 2018 7:19 pm
by tempuser
Ok Canelli, thanks for confirming that it's a known bug.

Can you please share with me the fix so that I implement it on the code?

Re: Privacy Policy acceptance at registration

Posted: Wed May 16, 2018 8:15 am
by canelli
the fix will be included in version 2.0

In general we don't produce a backport of fixes . After the release of 2.0, we wil check if the fix can be applied in the current 1.4

Re: Privacy Policy acceptance at registration

Posted: Sun May 20, 2018 8:46 pm
by tempuser
As a workaround for the current version, it's better to keep this checkbox checked by default. I modified these lines in lib.usermanager.php:

if($options['privacy_policy'] == 'on') {
$out .= Form::getCheckbox($lang->def('_REG_PRIVACY_ACCEPT'), 'register_privacy', 'register[privacy]',
'ok', true/*isset($_POST['register']['privacy'])*/);
}