Submitted by tabletguy on Mon, 12/28/2009 - 23:32
http://civicrm.org/aboutcivicrm
This is a very large and open source project for Constituent Resource Management, used by an impressive group of organizations, including Amnesty International, Wikipedia (for fund raising), as well as many others.
It has a "stand alone" version as well as versions which run under Joomla or Drupal.
I am suggesting installation and support of the stand alone version.
Status:
Closed (fixed)
Comments
Submitted by andreychek on Tue, 12/29/2009 - 09:50 Comment #1
Giving this one to Jamie for consideration.
CiviCRM is located here:
http://civicrm.org
Installation instructions and system requirements for the standalone version are here:
http://wiki.civicrm.org/confluence/display/CRMDOC/Standalone+Installatio...
Submitted by JamieCameron on Tue, 12/29/2009 - 12:59 Comment #2
I'll take a look...
It seems that by default CiviCRM has no admin account, and requires you to create one using openid. What would happen if some attacker created the first account before the admin did though?
Submitted by tabletguy on Sun, 01/03/2010 - 03:17 Comment #3
I will actually be going down to the main development company here in India that supports CiviCRM, so I can ask this later this week.
However, I assume the real question is how to create a default (first) admin via install script, since you already create admin accounts for many other scripts...
I'm using the Joomla version, so don't have any experience with that.
Submitted by tabletguy on Sun, 01/03/2010 - 03:24 Comment #4
I will actually be going down to the main development company here in India that supports CiviCRM, so I can ask this later this week.
However, I assume the real question is how to create a default (first) admin via install script, since you already create admin accounts for many other scripts...
I'm using the Joomla version, so don't have any experience with that.
Submitted by JamieCameron on Sun, 01/03/2010 - 16:57 Comment #5
Yes, that's what I'm looking for. Hopefully it doesn't require creating an OpenID account via some other service or anything like that ..
Submitted by tabletguy on Tue, 01/12/2010 - 05:07 Comment #6
I have just returned from the main company that develops CiviCRM. They confirmed that the stand alone version only uses OpenID at this time. They said that there are many users on their forum asking for other methods and the developer I was speaking to at the time said he did want to put something in place, but frankly, they don't (right now) know how to do it.
I took that to mean that they don't know which type of "secure" solution to implement. I showed them a couple of examples of simple username/password and said that would be sufficient for starters, etc. Not sure where it will go from here.
I think they would be open to suggestions from you, if you had a simple solution that you could point them to, etc.
I also suggested they could just "copy" the sign on from Wordpress, or something similar.
I'm sure there's more to it than what I've said, but I don't know what it would be.
I could give you the lead developer's email, etc. if interested. Otherwise, could you just ask for an openID at the start of the install and indicate that it was required to continue installation?
It's a pretty nice package.
Submitted by JamieCameron on Wed, 01/13/2010 - 01:21 Comment #7
Thanks for following up with the civiccrm developers. I'd like to support it, but the lack of a separate login is a blocking issue.
Let me know if they ever change this.
Submitted by tabletguy on Wed, 01/13/2010 - 01:34 Comment #8
If you have some sample code or can point me to something to copy/emulate, I would pass it along.
Submitted by sgrayban on Wed, 01/13/2010 - 05:08 Comment #9
Jamie you could always drop a .htaccess file in the root install directory and limit the access initially to the domain owner and post that the admin needs to create the admin login with OpenID and remove the temp .htaccess file after they complete that step in the install output.
Submitted by tabletguy on Fri, 05/07/2010 - 05:39 Comment #10
They have announced that they will be dropping support for a stand-alone version.
Submitted by kenlyle on Fri, 05/07/2010 - 15:39 Comment #11
Interesting. Thanks for the update. I had high hopes at one time for that version.