Unfortunately we have clients incorrectly use private information for member numbers. Many schools use social security numbers for example. They should NOT, but they do. We can't stop this from happening when custom forms are out there.

Thus the default templates for notifications do not include the member number. In fact email notifications submitted by non-confirmed/approved submitters should not contain any input submitted by the user. This is because they will enter information like

First Name: <script - bad stuff here>
Last Name: www . bad web site here . com

That would auto-reply to whoever got on the spammers email list from your web site using your email address and they could write a script to loop through it. One more reason we enable Captcha by default and that email auto-responses for anonymous submitted forms shouldn't auto-reply.

Contact us to upgrade to Tendenci

The open source solution chosen by associations around the world.

Want to talk? (281) 497-6567

Sign up for Tendenci - The Open Source AMS

No per user pricing. Unlimited admins.

Demo Now

Have Questions?

Contact us!

Site Search