[Resolved] Hide Password from email notification in %FORM_DATA% with User Edit Form

[Author]

Posts

[markR-11]

Tell us what you are trying to do? Trying to hide the optional password field from %FORM_DATA% when a user edits their profile through a CRED form. The password / confirm password fields only show if you select 'Yes' to the Change password radio button, and then when a user puts their password in, it is sending this password in plain text along with the other form data in the email notification. I want everything else to show, minus the password (for obvious security reasons).

Is there any documentation that you are following? Followed Toolset documentation around creating this form

Is there a similar example that we can see? Simply use %FORM_DATA% in email notifications of a user edit form that includes a password.

What is the link to your site? hidden link

[Nigel]

Hi Mark

I tested this locally and confirm that the password details are included in the %%FORM_DATA%% placeholder. I'll suggest that they are not (because if, for some reason, it is desired that the password be included, there is a separate %%PASSWORD%% placeholder for that.

I'd suggest you don't use the form data placeholder and instead include the fields you need manually.

You can use the other available placeholders, and if there are custom user fields you want including you can insert those with the Fields and Views button.

You'll need to add the attribute id='%%USER_USERID%%' to any fields you insert with the Fields and Views button for them to output the values for the user edited by the form.

[markR-11]

Hey Nigel,

I ended up having to add user_id='%%USER_USERID%%' to the types fields, and id='%%USER_USERID%%' to the built in user fields. This seemed to work - make sense, or is there a better way to do this? See attached.

%%DATE_TIME%%


Name: [wpv-user field="user_firstname" id="%%USER_USERID%%"] [wpv-user field="user_lastname" id="%%USER_USERID%%"]
Membership ID: [types usermeta='membership-id' user_id='%%USER_USERID%%'][/types]
User ID: [wpv-user field="user_login" id="%%USER_USERID%%"]
User Email: [wpv-user field="user_email" id="%%USER_USERID%%"]
Telephone: [types usermeta='user-telephone' user_id='%%USER_USERID%%'][/types]
Street Address: [types usermeta='street-address' user_id='%%USER_USERID%%'][/types]
Address 2 (Unit, Suite, etc): [types usermeta='street-address-2' user_id='%%USER_USERID%%'][/types]
City: [types usermeta='city' user_id='%%USER_USERID%%'][/types]
Province: [types usermeta='province' user_id='%%USER_USERID%%'][/types]
Postal Code: [types usermeta='postal-code' user_id='%%USER_USERID%%'][/types]
Company Name: [types usermeta='company-name' user_id='%%USER_USERID%%'][/types]
Email Notifications: [types usermeta='email-notifications-opt-in' user_id='%%USER_USERID%%'][/types]

-Mark

[Nigel]

Hi Mark, yes, that's expected, that you set the user id with the user id placeholder.

We already have an internal ticket reviewing this, and I commented to point out that if the user id placeholder is a necessary attribute, then it should be included automatically when using the GUI to insert the fields in the notification editor.

[markR-11]

Thank you!

[Nigel]

OK, I think we can close here?