CODEWITHSUNDEEP
c#sitecoresitecore7web-forms-for-marketers
Raju G
Raju G

Reputation: 97

Sitecore WFFM with sensitive data

Can i use WFFM in sitecore to capture sensitive data like user personal and banking details? Can someone please provide me what is the best approach?

Upvotes: 1

Views: 316

Answers (3)

josedbaez
josedbaez

Reputation: 581

To achieve this in sitecore 8, you need to override methods InsertFormData and GetFormData in class Sitecore.WFFM.Analytics.Providers.AnalyticsFormsDataProvider. This will encrypt data being stored in mongo's FormData table.

You might also want to override classes CombinedFormsDataProvider and SqlFormsDataProvider in case you switch to using SQL server as WFFM data store.

You will also need to encrypt aggregation data in SQL server reporting db. You do this by overriding Sitecore.WFFM.Analytics.Aggregation.Processors.FormSummary.FormSummaryProcessor. This will encrypt data being stored in FormFieldValues table.

  • Do not forget to patch the config files to use your class instead of default ones.

See this blog for full solution: http://josedbaez.com/2016/09/wffm-encryption/

Upvotes: 0

Sitecore Junkie
Sitecore Junkie

Reputation: 31

Although the first article I wrote -- the article shared by Martin -- will meet your requirements, I strongly recommend checking with the laws of your country first to ensure you are able to do this legally.

Upvotes: 3

Martin Davies
Martin Davies

Reputation: 4456

There are several articles which may be useful to you here:

The author has done a lot of work with secure WFFM forms.

He also did a presentation that might be relevant to you: https://www.youtube.com/watch?v=nrh8xEYS5NA

Upvotes: 1

Related Questions