I have a CDML form that gets filled out by the visitor. When they hit "submit" a new record is created. In Web Security I have defined an "All Users" user that can only "Create" records. So, after they hit submit, the form is filled out and the record goes to the dbase, then it takes them to a redirct page to send our office staff a notification e-mail that a record was created.

The problem I am having, is the Filemaker Pro web site says to use the following address to accomplish this:

FMPro?-db=aureal.fp3&-lay=cgi&-format=reply.htm&-mailto=[FMP-field:Email]&[email protected]&-mailsub=Thanks&-mailhost=smtp.yourhost.com&-mailformat=mail.txt&-recid= [FMP-Currentrecid]&-Find"

However, the "All Users" user can only create records and not -Find, so the above address fails. This whole process of course works fine if I assign the "All Users" user the ability to "Browse," but that is a major breach of security should someone stumble on the URL where the records are kept.

Any way around this?

Thanks again

quote:

---

Originally posted by drdigital9:

However, the "All Users" user can only create records and not -Find, so the above address fails. This whole process of course works fine if I assign the "All Users" user the ability to "Browse," but that is a major breach of security should someone stumble on the URL where the records are kept.

Any way around this?

Thanks again

---

How users can browse? Did you give them the HTML page to browse?

Hi, You can use a cgi mail form in the new record reply page - embed the Filemaker data as hidden fields, that way the action is driven by the server, not Filemaker.

Something like this:

<FORM ACTION="http://mydomain.com/cgi-bin/mailform.cgi" METHOD=POST enctype="x-www-form-encoded">

<INPUT TYPE=hidden NAME=date VALUE="[FMP-Field:creationdate]">

<INPUT TYPE=hidden NAME="username" VALUE="[FMP-Field:username]">

<INPUT TYPE=hidden NAME="address" VALUE="[FMP-Field:address]">

<INPUT TYPE=hidden NAME="*mailto" VALUE="[email protected]">

<INPUT TYPE=hidden NAME="*smtphost" VALUE="mailgate.mydomain.com">

<INPUT TYPE=hidden NAME="*header" VALUE="new database record">

<INPUT TYPE=hidden NAME="*mailfrom" VALUE="[email protected]">

<INPUT TYPE=submit NAME=Submit VALUE="OK">

</FORM>

I usually show the data as read-only which allows the user to check it, with an "amend" button which takes them to the record, or "OK" which posts the mail.

Makes it look like a feature

Jeff