Secure Confirmations

Component ID

1541794

Component name

Secure Confirmations

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Component created

Component changed

Component body

Secure confirmations interacts with Webform module confirmation message pages to do the following:

  • replace the sid in the URL with a token
  • limit access to confirmation message pages based on uid or permissions

This prevents users from viewing other users' submission confirmation pages by changing the sid in the URL. This is handy in situations where your confirmation message includes tokens that display sensitive information.

See http://drupal.org/node/810160