Security Update Applied to Public Applications

Security Update Applied to Public Applications

Dear App Creators,

We have rolled out a security update on July 2nd, 2020, for "public applications" and "public components" — Zoho Creator applications or their forms, reports, and pages that are made public to all visitors over the Web:

Note: Unless you receive an email from us regarding this, this update does not concern you.
Emails have been sent





About the update

When a user (logged into their Zoho account) accessed a public component, the Deluge system variables zoho.loginuserid and zoho.loginuser were returning the logged-in user's email address and username, respectively. This will no longer happen .

From now on, the new values for these system variables in all public components are:
  • zoho.loginuser = Public
  • zoho.loginuserid = null
Please note that this update does not concern the forms, reports, and pages that you've published .

Why the update

This update has been long due. We have now fixed this behavior as it could be misapplied to collect (and use) the end user's personally identifiable information without their consent — a privacy and security vulnerability.

We apologize for any inconvenience this may cause.

Action required

If you've made applications and components public, we request that you check them for the usage of the system variables zoho.loginuser and zoho.loginuserid, and ensure that your application logic remains intact when these variables return Public and null, respectively.

- - - - - - - -

If you have any questions or concerns, of need any assistance, please comment below, or reach out to us at support@zohocreator.com

Best,
The Zoho Creator Team

    Access your files securely from anywhere

          Zoho Developer Community




                                    Zoho Desk Resources

                                    • Desk Community Learning Series


                                    • Digest


                                    • Functions


                                    • Meetups


                                    • Kbase


                                    • Resources


                                    • Glossary


                                    • Desk Marketplace


                                    • MVP Corner


                                    • Word of the Day



                                        Zoho Marketing Automation
                                                • Sticky Posts

                                                • Zoho Creator - 2023 Release Projection 1

                                                  Hello everyone! A very Happy New Year to you and your family. Hope you're all good and having a great time using Zoho Creator to make your lives easier and your businesses prosper. 2022 was an action-packed year for us at Creator, and we hope to continue
                                                • Zoho Creator User Group meetups in a city near you! - Oct - Nov, 2023

                                                  Greetings from the Zoho Creator team! We're hosting a series of Zoho Creator meetups in various cities across the globe, and we'd love to meet you there! Our meetups are a great opportunity to network with industry peers, exchange ideas and best practices,
                                                • Zoho Creator - 2023 Release Projection 2

                                                  Hello everyone! Time truly flies when you're having an incredible journey, and today we mark the completion of an eventful and action-packed six months. It feels like just yesterday when we embarked on this adventure together with the launch of our new
                                                • Upcoming Updates - August 2022

                                                  Hi all, Greetings from the Zoho Creator team! Today we've got news for you on some exciting updates. And rest assured— there’s more to come! In this post, we'll be going over the upcoming features and improvements for this month as mentioned below. A
                                                • Introducing Zoho Creator's v2 APIs

                                                  Hello App Creators, Welcome to Zoho Creator's v2 APIs! This post will serve as the central point for migrating implementations of Creator's current APIs (v1) to v2. Improvements that v2 brings OAuth-based authentication, which is more secure than the


                                                Manage your brands on social media



                                                      Zoho TeamInbox Resources

                                                        Zoho DataPrep Resources



                                                          Zoho CRM Plus Resources

                                                            Zoho Books Resources


                                                              Zoho Subscriptions Resources

                                                                Zoho Projects Resources


                                                                  Zoho Sprints Resources


                                                                    Qntrl Resources


                                                                      Zoho Creator Resources



                                                                          Zoho Campaigns Resources


                                                                            Zoho CRM Resources

                                                                            • CRM Community Learning Series

                                                                              CRM Community Learning Series


                                                                            • Kaizen

                                                                              Kaizen

                                                                            • Functions

                                                                              Functions

                                                                            • Meetups

                                                                              Meetups

                                                                            • Kbase

                                                                              Kbase

                                                                            • Resources

                                                                              Resources

                                                                            • Digest

                                                                              Digest

                                                                            • CRM Marketplace

                                                                              CRM Marketplace

                                                                            • MVP Corner

                                                                              MVP Corner





                                                                                Design. Discuss. Deliver.

                                                                                Create visually engaging stories with Zoho Show.

                                                                                Get Started Now


                                                                                  Zoho Show Resources


                                                                                    Zoho Writer Writer

                                                                                    Get Started. Write Away!

                                                                                    Writer is a powerful online word processor, designed for collaborative work.

                                                                                      Zoho CRM コンテンツ






                                                                                        Nederlandse Hulpbronnen


                                                                                            ご検討中の方





                                                                                                  • Recent Topics

                                                                                                  • Mass Update in Zoho CRM

                                                                                                    Hello, I want to update my past update records by using deluge on some conditions. anyone can please tell me how can I do it.
                                                                                                  • LinkedIn Followers not correct

                                                                                                    It looks like Zoho Analytics only counts followers from the day it was connected to our LinkedIn-page. The Total Followers Count in Analytics only displays 549 followers, while in reality we have 1,036 followers. The information is correct in Zoho Social,
                                                                                                  • [API] How to get Contact's funnel?

                                                                                                    Hi everyone! I am trying to use the API to get a Contact funnel's (step, name.. anything). Can anyone help me? This information is not available in the API response... I need to retrieve and change my Contacts between funnels dynamically according to
                                                                                                  • Task created from Email Alias

                                                                                                    When forwarding multiple emails to project email alias, it will create a task as internal which makes a lot of "General" Task List as I've created automation to set the flag as external. Is there any way to set up the task list created from email alias
                                                                                                  • Automation#24: Auto-Update custom field from Accounts to Tickets

                                                                                                    Hello Everyone! Welcome back to the Community Learning Series! This episode dives into how Zylker Techfix streamlines account-related ticket references. Previously, employees had to manually check account details to retrieve specific customer information,
                                                                                                  • How do I add an email to tasks in Trident?

                                                                                                    Hi, I'm trialling Trident to see if it works better for me than the browser version. It's a nice idea and looks quite refined, so I'd like to be able to use it. My first question is: how can I add and email to a task? I can't find any obvious way, but
                                                                                                  • Project template after project creation

                                                                                                    How can I apply a project template AFTER the project has been created?
                                                                                                  • Creating Email template that attaches file uploaded in specific field.

                                                                                                    If there's a way to do this using Zoho CRM's built-in features, then this has eluded me! I'm looking to create a workflow that automatically sends an email upon execution, and that email includes an attachment uploaded in a specific field. Email templates
                                                                                                  • How to create a Field with answers as Yes, No> Further if no is selected a new field to be visible to give details

                                                                                                    Dear All, I am creating a feedback form in HR Letter. The question is were you satisfied with the work allotted. Expected answer to this is Yes, No. Further if the response is no, then a field to be give to fill more details as to why no was selected.
                                                                                                  • Filter Tabs in a Dashboard

                                                                                                    I have multiple tabs in a dashboard one of which is aimed at a different audience, is it possible to filter out this tab for a group of users?
                                                                                                  • How do I set up Contact Scoring for my existing contacts

                                                                                                    I'm trying to set up Contact Scoring for my subscribers, 9 months after creating the database. I've added the Campaign Activities, but none of the contacts have a score. How can I update all the contacts so they show a score? My goal is to ultimately
                                                                                                  • ZOHO PEOPLE

                                                                                                    HOW CAN I DELETE LEAVE HISTORIES IN ZOHO PEOPLE?
                                                                                                  • Kiosk Studio: Function FIX for Date/Time Field (Keep getting wrong format error)

                                                                                                    I am using the foillowing function in my Kiosk Studio to update the previously entered Date/Time field from previous screen to update that to the same date/time field in Lead Record. Every time I 'Save & Execute' I get a Success but with 'Date/time Format
                                                                                                  • Zoho CRM Web To Lead Form: Radio Buttons/Pulll Down Menus?

                                                                                                    Hi is there a way to set up radio buttons, check boxes or pull down menus in the web to lead form? We often ask additional lead qualifiers or demographics information and in some cases radio buttons or pull down menus are necessary or more efficient to
                                                                                                  • 5名限定 課題解決型ワークショップイベント Zoho ワークアウト開催のお知らせ (10/31)

                                                                                                    ユーザーの皆さま、こんにちは。Zoho ユーザーコミュニティチームの藤澤です。 10月開催のZoho ワークアウトについてお知らせします。 ━━━━━━━━━━━━━━━━━━━━━━━━ Zoho ワークアウトとは? Zoho ユーザー同士で交流しながら、サービスに関する疑問や不明点の解消を目的とした「Zoho ワークアウト」を開催します。 Zoho サービスで完了させたい設定やカスタマイズ、環境の整備など……各自で決めた目標達成に向け、 他の参加者と同じ空間で作業を行うイベントです。先輩ユーザーや他の参加者と意見交換をしながら集中して作業に取り組むことが可能です。
                                                                                                  • Is Drawing feature supported in zoho Sheets?

                                                                                                    Is there any option to draw arrows and some basic shapes such as circle , rectangle etc in zoho sheets? if so, can someone help me find it 
                                                                                                  • Zoho Meetings - Scheduling sucks

                                                                                                    I wanted to try this out for our little meeting group. I scheduled the meetings for Tuesdays, Thursdays and Fridays. No matter what I did, the meetings all showed on FRIDAY. I changed the date and hit save. Still friday. Terrible system. Back to Zoo
                                                                                                  • This user is not allowed to add in Zoho. Please contact support-as@zohocorp.com for further details

                                                                                                    Hello, Just signed up to ZOHO on a friend's recommendation. Got the TXT part (verified my domain), but whenever I try to add ANY user, I get the error: This user is not allowed to add in Zoho. Please contact support-as@zohocorp.com for further details I have emailed as well and writing here as well because when I searched, I saw many people faced the same issue and instead of email, they got a faster response here. My domain is: raisingreaderspk . com Hope this can be resolved.  Thank you
                                                                                                  • Brand New and have some questions

                                                                                                    Hi everyone. I am brand new to Zoho and have some questions I need help with. 1. I just imported a bunch of contacts and most of them don't have any association with an account. However, an account is required to add them to pipelines it seems. Can I
                                                                                                  • Zoho very poor support!

                                                                                                    More then 1.5 week ago I've contacted Zoho support by email and STILL no reply. What kind of business are you people running? I'm a paying customer and I demand support. Your email service is blocking valid emails from my business partner because of  "we generally do not accept emails from dynamic IP bla bla bla" I, NOT YOU, decide which emails I want to receive. I don't need your crap email protection. If I want spam protection I'll implement it myself. I've put his domain on the whitelist and STILL
                                                                                                  • Immediate action required by Notification SMS users

                                                                                                    Attention dear customers, This announcement seeks immediate action by CRM Notification SMS users to update their telemarketer aggregator for notification SMS compliance. We would like to bring to your attention an important update in the Telecom Regulatory
                                                                                                  • Import subform entries conveniently in CRM

                                                                                                    Dear All,   Subforms have always been crucial for associating additional data with CRM records. You can easily associate line items with parent records and keep track of various details related to your records. We're pleased to announce that we've introduced
                                                                                                  • Pay milage expense with undepositied cash

                                                                                                    Hello When I add millage, the only probable option to "pay through" is Owner's Equity. I pay for the fuel using undeposited cash but I can set "paid through" to undeposited funds while entering mileage. I do not have employees and this is the mileage
                                                                                                  • This domain is not allowed to add. Please contact support-as@zohocorp.com for further details

                                                                                                    I am trying to setup the free version of Zoho Mail. When I tried to add my domain, theselfreunion.com I got the error message that is the subject of this Topic. I've read your other community forum topics, and this is NOT a free domain. So what is the
                                                                                                  • Involved account types are not applicable when create journals

                                                                                                    { "journal_date": "2016-01-31", "reference_number": "20160131", "notes": "SimplePay Payroll", "line_items": [{ "account_id": "538624000000035003", "description": "Net Pay", "amount": 26690.09, "debit_or_credit": "credit" }, { "account_id": "538624000000000403", "description": "Gross", "amount": 32000, "debit_or_credit": "debit" }, { "account_id": "538624000000000427", "description": "CPP", "amount": 1295.64, "debit_or_credit": "debit" }, { "account_id": "538624000000000376", "description":
                                                                                                  • Inconsistent "Happiness Rating" Percentage

                                                                                                    When searching through the list of customers, the Happiness Rating percentage that shows for one particular customer of ours is 71%. However when going into that customer, the percentage shows as 100% (which we think is correct as we can't find anything
                                                                                                  • Zoho Desk - how to see date ticket created?

                                                                                                    We have migrated from Help Scout and are a customer service team, not a technical ticket team. (i.e. we don't have 'due in X hours' needs) We are accustomed to seeing the date the customer sent the email / ticket received. I don't see a way to display this very basic information in the Views. Please assist with how to display this.
                                                                                                  • Not able to create a new, second help center

                                                                                                    Hi. I'm not able to create a new, second help center. How can I solve this problem?
                                                                                                  • Contacts and Accounts views support and Ticket details screen UI enhancement - Zoho Desk Android app update

                                                                                                    Hello, everyone! In the latest version(2.7) of the Zoho Desk Android app update, we have covered the following features: Contacts and Account views UI enhancement in the Ticket details screen IM icon display Contacts and Accounts view You can now access
                                                                                                  • Enable 'drag & drop' upload of files to Purchase Receives

                                                                                                    Zoho has enabled drag and drop functionality for sales orders and purchase orders in Zoho Books. Currently this functionality is not enabled for Purchase Receives, which require you to "upload your files" via the file manager rather than simply dragging
                                                                                                  • Unbilled Items Report?

                                                                                                    Hello! Is there any way to display a list of items that remain unbilled, without creating an invoice for each customer to see if the unbilled items box is displayed? ;-) Ben
                                                                                                  • SSL Certificate Error - Connection is not secure

                                                                                                    I am new to Zoho Desk, but I've tried to link our new Zoho helpdesk to our domain via the subdomain https://helpdesk.leannova.de It appears the CNAME change we implemented is working, but we're getting an SSL error that looks like this: *********************************** Your connection isn't private Attackers might be trying to steal your information from helpdesk.leannova.de (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID This server couldn't prove that it's
                                                                                                  • Log when ticket is moved to a different department

                                                                                                    Hello, is there a way that I am able to log when and who moved a ticket from one department to another? I tried looking at workflows and I can't find any way to log a history when a ticket's department is changed. It would be great if this data could
                                                                                                  • SMTP Error: Could not authenticate.

                                                                                                    Hi team! Trying to send email throu PHPmailer. Im using smtp.zoho.eu, TLS with port 587. Username: alex@aljon.nu Password: *********** (well, my login password). This is the error: 2017-12-19 13:06:49 SERVER -> CLIENT: 220 mx.zoho.eu SMTP Server ready
                                                                                                  • 554 5.2.3 MailPolicy violation Error, help?

                                                                                                    This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. 554 5.2.3 MailPolicy violation Error delivering to mailboxes I am not sure why i am getting this, please
                                                                                                  • Recover trash emails deleted by Zoho

                                                                                                    Three times in the past 6 weeks all emails have been deleted from trash. I have NOT accidentally deleted them myself--they literally disappear before my eyes. I have the trash folder set up to delete items after 30 days, but they have suddenly ALL disappeared
                                                                                                  • ERROR:554 5.1.8 Email Outgoing Blocked.

                                                                                                    Buen día Tengo un problema con una de mis cuentas de correo corporativo, investigue sobre el error, borre mensajes y el problema persiste. No se como puedo desbloquear mi cuenta de correo. El correo en cuestión es dinagramascentro@servicioslatinosltda.co
                                                                                                  • ME SALE ESTE ERROR: No fue posible enviar el mensaje;Motivo:554 5.1.8 Email Outgoing Blocked

                                                                                                    Ayuda!! Me sale este error al intentar enviar mensajes desde mi correo electronico de Zoho! Tampoco recibo correos pues cuando me envia rebotan. Ayuda, Me urge enviar unos correo importantes!! Quedo atenta MAGDA HERNANDEZ +5731120888408
                                                                                                  • Custom Button in Shipments

                                                                                                    Custom buttons feature is very much needed in shipments. Please work on this feature request!
                                                                                                  • Zoho mail is logging me out almost every day ?

                                                                                                    Yes I have clicked the Remember Me option. Yet I need to login again every 1 - 2 days, sometimes multiple times per day. The saved credential does not persist.  Using fairly clean Chrome.
                                                                                                  • Next Page