Security Update Applied to Public Applications

Security Update Applied to Public Applications

Dear App Creators,

We have rolled out a security update on July 2nd, 2020, for "public applications" and "public components" — Zoho Creator applications or their forms, reports, and pages that are made public to all visitors over the Web:

Note: Unless you receive an email from us regarding this, this update does not concern you.
Emails have been sent





About the update

When a user (logged into their Zoho account) accessed a public component, the Deluge system variables zoho.loginuserid and zoho.loginuser were returning the logged-in user's email address and username, respectively. This will no longer happen .

From now on, the new values for these system variables in all public components are:
  • zoho.loginuser = Public
  • zoho.loginuserid = null
Please note that this update does not concern the forms, reports, and pages that you've published .

Why the update

This update has been long due. We have now fixed this behavior as it could be misapplied to collect (and use) the end user's personally identifiable information without their consent — a privacy and security vulnerability.

We apologize for any inconvenience this may cause.

Action required

If you've made applications and components public, we request that you check them for the usage of the system variables zoho.loginuser and zoho.loginuserid, and ensure that your application logic remains intact when these variables return Public and null, respectively.

- - - - - - - -

If you have any questions or concerns, of need any assistance, please comment below, or reach out to us at support@zohocreator.com

Best,
The Zoho Creator Team

    Zoho Marketing Automation
            • Sticky Posts

            • Introducing Zoho Creator's v2 APIs

              Hello App Creators, Welcome to Zoho Creator's v2 APIs! This post will serve as the central point for migrating implementations of Creator's current APIs (v1) to v2. Improvements that v2 brings OAuth-based authentication, which is more secure than the
            • Join our developer community!

              Dear developers, To improve communication and transparency with you, we started a developer-focused newsletter in early 2021. To expand the scope of  our outreach, we are looking to create a go-to database of our developer community across professional
            • It's time to evolve: Upgrading to Zoho Creator 5

              Dear App Creators, With our commitment to continually refining and improving our user experience, we're gearing up to upgrade all accounts to Creator 5 on (UPDATED) from December 1st, 2020 , in phases . In other words, from this date forward, all your
            • Upcoming updates - October-November, 2020

              Hello App Creators, We'll be rolling out the following updates in the next 4-5 weeks: Support for encrypting IP addresses Applying permissions while printing and exporting Using pixels to specify font size in pages Connections for panels and Deluge integration
            • Zoho Creator positioned as a Visionary in 2020 Gartner Magic Quadrant for Enterprise Low-Code Application Platforms

              Hi folks, We come bearing good news! We are delighted to share that Gartner has named Zoho Creator a "Visionary" in this year's Gartner Magic Quadrant for Enterprise Low-code Application Platforms (LCAP). ​ Gartner Magic Quadrant for Low-code Application

            Zoho Pagesense Resources

              Zoho SalesIQ Resources



                    Zoho TeamInbox Resources

                      Zoho DataPrep Resources



                        Zoho CRM Plus Resources

                          Zoho Books Resources


                            Zoho Subscriptions Resources

                              Zoho Desk Resources

                                Zoho Projects Resources


                                  Zoho Sprints Resources


                                    Qntrl Resources


                                      Zoho Creator Resources


                                        Zoho WorkDrive Resources




                                            Zoho Campaigns Resources

                                              Zoho CRM Resources

                                                      Design. Discuss. Deliver.

                                                      Create visually engaging stories with Zoho Show.

                                                      Get Started Now