Allow users to create/edit neat public profile with Articles and Newspublisher

Hello everybody,
As this is my first post, I wish to congratulate the founders and community members of MODx CMF. Web Design just became worth it.
Often there is a need to create profiles, but there is no real full blown Extra for that.
Automatic creation of profiles on user sign-up can be inadequate, so we'll just give them the option.

The major tools used are already in the repository: Articles, Newspublisher, Profile ...
Features:

1. Frontend creation
2. Created profiles will have the user's username for page title
3. A profile can only be edited by the createdby user
4. Profiles will have the traditional user information (plus extended fields)
5. Profiles will allow the use of Template Variables for more crazy creativity

Hopefully someone will find something useful, or be interested in adding a veritable twist to the procedure.
http://www.leofec.com/modx-revolution/robust-personal-profile-created-and-edited-by-specific-user.html [ed. note: donshakespeare last edited this post 11 years, 6 months ago.]

I think you could build that with the UpdateProfile snippet (part of the Login package) and a relatively simple postHook snippet to create/update the profile.

You could do it with NewsPublisher and a crapload of TVs, but I don't think that would be the best approach.

BTW, I'd recommend using the user's full name for the pagetitle rather than their username for greater security. [ed. note: BobRay last edited this post 13 years, 8 months ago.]

Quote from: BobRay at Jan 18, 2013, 02:25 PM

BTW, I'd recommend using the user's full name for the pagetitle rather than their username for greater security.

Hello,
I am interested in this. How is the security affected or involved?
Plus, some people might not want to disclose their full name, for whatever reason.
In all honesty though, I reckon the full name looks more professional.

The username is very useful for people who want to launch a brute force attack on your site. There are easily available tables of common passwords and it's easy to set up a bot to just keep trying to log in with the username and one password after another until you get a hit. If all your usernames were pagetitles, someone could use cURL to scrape all the usernames and feed them to the bot.

The full name, on the other hand, is useless because it's not used at all in the login process.

Excellent point! and well explained. I will not now forget this.

Thanks