Feature Request: Email URL
mitchellknight opened this issue · 5 comments
Use Case
We use FlashPaper when requesting sensitive information from clients. Even though we provide simple, stey-by-step instructions for how to use FlashPaper, many of our clients still don't send us the URLs to decrypt their messages.
As much as this is a people problem, instead of a technical problem, I'd love if it could be addressed.
Possible Solution
Allow us to enable automatically sending URLs to an email address of our choice. It could use the PHP mail() function to keep it simple or PHPMailer if something more robust is needed. This feature be disabled by default unless manually enabled in settings.php for extra security.
settings.php:
'email_secure_url' => 'name@example.com',
Thank you for your suggestion! I use to run into the same issue when requesting secrets from my clients.
What I did is change this setting to false. Now, when I request a secret from a client, I ask them to send me the "secret retrieval code" they're given after submitting their secret. They're less inclined to retrieve (and thus destroy) their own secret now that it's not a valid URL.
When they send you the code, you just append it to the end of your site's URL like this: https://yoursite.com/?k=<code>
I also found it beneficial to change this setting to something along the lines of "Share this code with the tech that requested it".
I hope that helps! If not, I will look into possibly implementing an email feature like you suggested.
That's an interesting solution. I'd test it out with my clients. Thanks!
You're very welcome. Please post back here and let me know how it goes.
I know this issue is closed but I wanted to let you know the return_full_url' => false option has worked well with my clients. It's more obvious they're supposed to share a code than share a URL. 👍
I'm very happy to hear that! Thank you very much for posting an update