Closed maz0717 closed 7 years ago
I removed the quotes on that line and it seems to work fine. Also actually does resolve issue #150.
One recommendation. My previous patch checked for the existence of session for the same purpose. Checking session would be a little more flexible because it would allow the widget to work without a session setup. Just no security. It would also be nice if the new security feature was configurable.
Yes - the session handling check can exist without testing the need for console apps.
On your next query, the module uses JavaScript based data handling and transfer of data for POST submissions... hence it will not be possible to implement this security for console apps (where you will not have a browser front end to parse javascript).
EDIT:
If you need to use the security feature without sessions... then just set a value for Module::treeEncryptSalt
yourself in the tree module settings... no sessions will be needed. This will be documented.
I just now updated to the latest version and get the following error when trying to view a node with the widget.