Page MenuHomePhabricator

Investigate forms in emails prefilling payments wiki fields
Closed, InvalidPublic

Description

I've mentioned RebelMail a few times -- they're a company which specializes in interactive email. One of the features they could offer us is an interactive donation form embedded in the email. Here's a mockup of a form in-email (note this link contains graphic language...):

https://projects.invisionapp.com/share/H542AKEQM#/screens/67243396

I want to test out one of these forms in a US email in September or October. If we wanted to incorporate any part of the payments.wiki form, it would just be the name and email fields. Do you think that's technically possible, and if it is in keeping with security protocols? At the least, RebelMail can just replicate the form on donate.wiki, but it would be a much more interesting test to add more fields.

This will be done through HTML and CSS rather than loading an iframe. RebelMail does track its own analytics for the in-email engagement, but they'll use a numeric unique identifier rather than any PII.

Does that sound fine to you? Can someone poke into this before September so I know how to move forward?

Event Timeline

It's possible right now to send in fname=Blah&lname=Blah&email=foo@bar.com parameters on the query string and have them pre-filled in our payments form. Not sure about the privacy and security implications, but name and email are technically possible.

Oh that's awesome, I didn't know! Thanks, Elliott :)

@DStrine, is this something tech should look at more from a security
perspective, or should I just go to legal at this point?

One thought I have is that the email address parameter will probably make modsecurity shout.

@dpatrick
Would you mind taking a look at our crazy plan here? We're considering including the donor's name and email as URL params in links embedded in the email. Bad idea?

bumping this

@dpatrick do you have any opinions on this? I could set up a meeting if you would like to discuss further.

AKanji-WMF changed the task status from Open to Stalled.Jun 20 2023, 9:23 PM
AKanji-WMF subscribed.

I am closing - I don't believe this aligns with our current approach/plans.