× Joomla Facebook Connect support forum

Topic-icon JFBConnect with Community Builder 1.3.1

Active Subscriptions:

None
15 years 1 month ago #9054 by guero
Thanks, Alex! We will install it on a dev environment and give it a spin. I will get back to you with our findings and a short list of the things that would help us most in a next version. Thank you!
Oliver
The topic has been locked.
Support Specialist
15 years 1 month ago #9064 by alzander
Great! Always love feedback about what our users want! Good luck, and hope everything goes well on your site.
The topic has been locked.
Active Subscriptions:

None
15 years 1 month ago #9398 by guero
Hello,

As you know, I am playing around with the latest version on our site. In addition to the other question/answer thread we have going, I wanted to let you know about the top three requirements I would much appreciate if addressed in a future version. They are all kind of related.

1. Currently, I am creating Full Joomla Users because it seems the only way I can have the user choose a username at registration. I actually don't need them to have full joomla accounts. I would be more than happy with 'Facebook user only'. However, I need them to be able to choose a username, which is displayed on the user profile, and fb_{Facebook User ID} just would not look very good there.

2. The ability to post a message to a users Facebook wall at registration is great. It really contributes to word of mouth. However, as always, some people are not happy at all when stuff gets posted to their wall. Of course, we ask for it per our TOS which the Facebook pop-up asks people to accept before registering it, but arguing with a new user about who is right, etc. is not very helpful. So, the requirement would be to have the user have an option to un-check a check box to post to his wall at the time of registration. It would be great, if the user could see at this point i) the text that would be posted, and ii) a small text I could write on why we ask to post this. This could maybe be in a screen or window prior to the user getting sent to the Facebook log-on screen. It would be fantastic to combine it with the requirement one above: the user could be displayed a field to choose the username at the same time.

3. Last but not least, an opportunity to explain to the user why the Facebook permissions being requested are asked for. For example, 'we ask for your location to match you with users in the same area'. Again, ideally combined with the above two requirements.

Thanks very much!
Oliver
The topic has been locked.
Support Specialist
15 years 1 month ago #9407 by alzander
Oliver,
1) Custom automatic username - Yeah, this will definitely be a configuration option in the future. For now, you can easily do it manually. We wanted to get this into the 3.2 release, but there just wasn't time to get the configurability we wanted along with testing it all. Please check out the below post and hopefully it will help:
www.sourcecoast.com/forums/topic?id=1981&p=1#p8885

2) That's a good idea about the confirmation of post. I can see doing it with a pop-up that the user can see the text and actually confirm the post of it. With a checkbox though, that would only be for the "Full Joomla User" option, which may be problematic. The next release will have more ways to do pop-up posts to a users wall instead of the silenty posts we do now. The pop-up posts do not even require the Wall Post permission since the user has to actively choose to post it.

3) This is a good idea, but not something we can do in the pop-up itself. That's completely controlled by Facebook, so you'd need to do this around wherever the Login With Facebook button is on your site, and that can be done now through Custom HTML modules or other indicators.

Hope this all helps, but if you have other questions/suggestions, just let us know!
The topic has been locked.
Active Subscriptions:

None
15 years 1 month ago #9424 by guero
OK. I am looking forward to the next version then. That would be really good things to have.

Oliver
The topic has been locked.
Active Subscriptions:

None
15 years 1 month ago #9623 by guero
Hi Alex,

Quick question: How can I turn on SSL so that the username/password is handled over https after the user is being asked for them when creating a Full Joomla User?

Thank you,
Oliver
The topic has been locked.
Support Specialist
15 years 1 month ago #9631 by alzander
There's no way to turn it on for just that page.. that's one thing that's annoying in Joomla is that SSL is an all or nothing thing, unless you want to take a lot of effort to enable it only on one page. Additionally, if you allow users to log in to your site on multiple pages, you'll want to have SSL enabled for all of those pages as well, since the password will be transferred in plain text as well.

To enable it for your site, you can do it in the Global Configuration area.

Hope this helps!
The topic has been locked.
Active Subscriptions:

None
15 years 1 month ago #9635 by guero
Really? Oh wow! That is a rather big shortcoming I'd say. We found a way to make the regular sign-up over SSL and turn SSL on for certain menus. But in order to get the JBFC run over SSL we'd have to turn on SSL for the entire site? Maybe silly question: but do the guys at Joomla understand this all or nothing shortcoming of theirs? Are you aware if they might have plans to fix that in the near future?
The topic has been locked.
Support Specialist
15 years 1 month ago #9645 by alzander
It depends on what you're trying to do. There are ways to make it work.. for instance, our purchase pages are SSL enabled, but every other page is not. The security isn't for JFBConnect, it's for credit card information. We do this through some custom rules in our .htaccess file to redirect users to the SSL version if they're on a specific page, but force non-SSL for other pages. There are other ways to accomplish this.

I'm a little confused, I guess, as to what you're trying to accomplish specifically. The user's Facebook credentials are always transferred over SSL. During the new user creation, their username and password are generally not sent over SSL, unless enabled within Joomla. Again, if you're concerned about it on this page, then you should be concerned about it on any page which lets the user use their Joomla credentials to log in, since the password will be sent unencrypted there as well. I don't know how your logins work on your page, so maybe this is ok.

Let me know if the above makes sense. I'm sure we can give you what we do for our .htaccess file to force SSL on a specific page, but there's no way within core Joomla to force it per page.. just for the site, as you can see in the Global Config settings.

Hope this helps explain
The topic has been locked.
Active Subscriptions:

None
15 years 1 month ago #9654 by guero
Hi Alex,

Thanks for the detailed post. Let me explain: We got all cb logins and the cb registration running over SSL. This is possible because you can force, for example, menu items to use SSL. This is also possible with some other modules, because they have been made in a way that they can be chosen as menu items. If there was a way to set a menu item as type 'JFBConnect/login' then I think it would be possible to do exactly what we need. And that is:

Right now, when a user clicks for the first time on the Login via Facebook button, the FB window pops up, handles the login (using SSL as you say) to Facebook, and then leads to the Joomla page on our site from JFBC where it asks the user to either create a new account or associate with an existing one. It is that page which is not run over SSL.

Or in other words: We have all logins and registration (except JFBC) run over SSL and the rest of the site without SSL and that without any htaccess rules. With JFBC we are lagging the ability to force the loginredirect account creation/associaton step for a full Joomla user creation. If the module could be set as a menu item, then it should be possible.

I hope this makes more sense. Thank you
Oliver

PS Btw, the other thread we are having re the invite part, if you get a chance to respond to that it would be great. It's been eluding us for a while now. Thanks for all your help!
The topic has been locked.