Discussions

35 Character Validation (UPDATED)

OMC Documentation-Oracle
OMC Documentation-Oracle Posts: 103 Employee
edited Apr 29, 2022 6:26AM in Eloqua
Updated June 8, 2017: This notice has been updated with new information about the 35-character limit. Please read below for details about these changes and timeline.

Overview

As part of our ongoing efforts to continuously enhance application security and ensure that data coming in and out of Eloqua is secure, we will be applying a 35-character limit by default on new form fields added to either newly created or existing forms. This change will be effective with the arrival of the 487 release (April 4 - 23, 2017).

This character limit is being introduced to help reduce the risk of malicious URLs being entered into your database since forms are an unauthenticated source of data that are publicly accessible by anyone. The 35-character limit will only be applied to text fields (single select) and hidden fields (including hidden campaign IDs).

Note: While the 35-character limit is being applied by default, users can choose to either manually disable field validation by unchecking the Must contain a valid number of characters checkbox or maintain field validation but only adjust the maximum character length value. Again, this change only applies to new form fields being added to either newly created or existing forms. Current form fields across any existing forms will NOT be impacted.

Also, as of 488, you will now be able to optionally request to apply the 35-character count to all existing forms.

What's changing

With the 487 release (April 4 - 23, 2017): The impact to 487 is minimal, and limited to new forms, and new forms fields added to existing forms.

We will be enabling the Must contain a valid number of characters checkbox by default and setting it to 35 characters for all New Forms. This checkbox will also be applied by default to newly created form fields added to existing forms. To allow more than 35 characters, simply change the maximum amount if you require a longer character length, or uncheck the Must contain a valid number of characters checkbox in the Form Field Validation Tab (shown below) if you do not require a restriction.

pastedImage_10.png

Additionally, with the arrival of the 488 release, you may now choose to optionally apply the 35-character count to all existing forms. If you choose to do so, the impact would apply to all forms with the following criteria:

  • Forms that do not have data submitted after Oct 1st 2016
  • Form fields with all form submission data less than 35 characters
  • Forms that have more than 1000 form submissions

The Form Fields will have a 35-character count applied to them.  When loading the form, you will notice the “Must contain a valid number of characters” checked off as seen below:

pastedImage_7.png

Note: Customers will be given of a list of all effected form fields from My Oracle Support on request.

Timeline

487 (April 4 - 23, 2017): New Forms and any new form fields added to any existing forms will have the “Must contain a valid number of characters” checked and the character limit set to 35 characters by default.

488 (May 16 - June 4, 2017): You can optionally enable the 35-character default for your existing forms, until September 8th, 2017.

Please check the Eloqua Release Center for release dates for your POD.

Next steps

Action Required: If you want to allow your form to collect more than 35-characters in a form field, please change the maximum value.

Optional Action: You can choose to enable the 35-character default for all your existing forms. To do so, please log in to My Oracle Support and create a service request to apply these changes to your Eloqua Forms

FAQs

Q: Why is this change occurring?

A: Form fields with greater than 35 characters are more prone to security vulnerabilities through the submission of malicious URLs.

Q: Are all form fields effected/subjected to the 35-character limit?

A: No, only Text fields (single select), and hidden fields (including hidden campaign IDs) have the 35-character limit.

Q: Who can make changes to the default character limits?

A: Any Eloqua users can make these changes. No specific access rights are required.

Q: What happens to Existing Forms that have a New Form Field created?

A: By default, they will have the validation checkbox checked, but it can be turned off by unchecking the Must contain a valid number of characters checkbox or adjusting the maximum value.

Post edited by OIT Integration User on