Comment Engagement links are failing
Am I the only person who's getting bad links?
Links that look like this (from notification emails) produce an error message, even when I'm logged in.
https://challenge.theidiet.com/space/lasting-change/post/step-1?comment_id=54
My site is set to auto-log-in on links from notification emails.
The links work perfectly on our end.
However, we’ve deactivated this feature due to past incidents where members forwarded these emails to others, inadvertently granting access to their profiles. For us, this poses a significant data protection risk, which is why we’ve decided to disable it.
André Salier yes.. Magic links are tricky/easy (vector attack) and don't have any expiration so the easiest way to get into a fCommunity/Wordpress is to get the Magic Link (or maybe even generate/replicate them since they are not OTP #RainbowTable "&fcom_url_hash=").
Ref: link
It would be really useful if we could specify the link expiration date (if someone wont click it in the timeframe there is a regular way of logging in so it shouldnt be any issue) and number of times for using the login link (by default=1 time).
Hi Lee Busch
We found that this issue occurs in course comments. It's been fixed in the development version. Thank you for reporting.
Raiyan Marzan Thank you for working on this!
Raiyan Marzan Possibly related to this: If I'm in a Course lesson, and I click on a bell Notification dropdown link, I don't go anywhere. But the Notification is canceled regardless.
Lee Busch Got it, I’ll look into this as well. Thank you