Privacy Policy acceptance at registration

[tempuser]

Hello,

I noticed that users are able to register without clicking the accept privacy policy checkbox, although the setting of 'Privacy Policy MUST be accepted' is set to true. I confirmed this from the 'privacy_policy' column database in the temp users table, the value is '0' for some users in this table.

What is the fix of this bug?

Thanks.

[alfa24]

Step to reproduce? Details please

[max]

Hello,
I tried to reproduce what you describe on a Forma 1.4 and on a Forma 2.0. In both cases, if you don't accept the privacy policy, you are correctly shown an alert (you must accept the privacy policy) and you are NOT registered.

[tempuser]

Ok Max, I also tested it upfront and was fine, but I don't know how registrants were entered in the database with '0' value in the 'privacy_policy' column? that's why I assumed it somehow doesn't work appropriately for some people, or otherwise how did this happen?

[max]

I don't know about the db, but since the functionality works correctly I am moving this thread to a different forum.

[alfa24]

The field value is set by setAcceptingPolicy function in /appLms/models/PrecompileLms.php

[canelli]

I think that some users was able to skip the acceptance of the privacy polices .
There are some not ordinary navigation path that can produce this behavior . It's a know bug (hard to reproduce)

We are working to fix the problem in the 2.0 release . We are also working for enanchements of the privacy policies feature

[tempuser]

Ok Canelli, thanks for confirming that it's a known bug.

Can you please share with me the fix so that I implement it on the code?

[canelli]

the fix will be included in version 2.0

In general we don't produce a backport of fixes . After the release of 2.0, we wil check if the fix can be applied in the current 1.4

[tempuser]

As a workaround for the current version, it's better to keep this checkbox checked by default. I modified these lines in lib.usermanager.php:

if($options['privacy_policy'] == 'on') {
$out .= Form::getCheckbox($lang->def('_REG_PRIVACY_ACCEPT'), 'register_privacy', 'register[privacy]',
'ok', true/*isset($_POST['register']['privacy'])*/);
}