Closed (won't fix)
Project:
Drupal core
Version:
8.0.x-dev
Component:
contact.module
Priority:
Normal
Category:
Feature request
Assigned:
Reporter:
Created:
15 Oct 2007 at 18:18 UTC
Updated:
29 Jul 2014 at 17:41 UTC
Jump to comment: Most recent file
Comments
Comment #1
bradlis7 commentedNot sure if this is a better status to have or not...
Comment #2
bradlis7 commentedI'll put it down for 7, because I don't think 6 is open for this feature.
Comment #3
BioALIEN commentedI would personally tag this for D6. What you're patching here looks security related as most contact forms return a referrer for an endless list of reasons.
It's a welcome enhancement to the contact.module and it gets my +1.
Comment #4
bradlis7 commentedIf you think so, I'll tag it so until someone says otherwise. Should this be bug report?
Comment #5
bradlis7 commentedWell, I've made a working patch, but I don't like the way I had to do it. It feels like too much of a hack, using session variables and such. If there's a form API guru out there, I could use your wisdom on this...
Comment #6
dries commentedCoding style needs work. Should also be postponed to Drupal 7 as Drupal 6 is feature frozen.
Comment #7
bradlis7 commentedTry this. If any more code cleanup is necessary, let me know.
Comment #8
robin monks commentedPlease make sure some sort of check_plain is run on the referrer, we don't want to pass uncleaned input.
Robin
Comment #9
dave reidInstead of writing the referrer to the session, it should be added as a FAPI element:
I think this also needs more discussion and since it's a feature request, it's not likely to be accepted for D7. Bumping to D8.
Comment #10
deekayen commentedIn the many years since this issue was created, the mail_alter hook was introduced. I can picture altering various things through a contrib module to add a form value containing the referrer and then altering that into the mail, either as a body concatenation or a new X- header.