Hi Ismayil,
Thank you so much. I'll read what you recommended me.
Thank you again.
jh
Note, not all Elgg APIs are public. Anything starting with "_" or marked @access private is off-limits and will change or be removed without notice!
[Moderator: this comment was off-topic. It was moved to its own topic. Read it here.]
Ooops! Thank you, Steve. I saw a list of web services somewhere (if I remember well, e.g. user.register, user.friend.add, group. join etc.), but it's true that they were deprecated. So later they were removed? Isn't it possible to find a collection of such basic methods somewhere? Or a common example like a skeleton to learn how to write what's needed? (Or isn't it the "system.api.list" just such a frame, so I should see its code?)
Thank you again..
There are some plugins here and on github. I would recommend requiring API authentication for all methods. Last time I used one of thesw plugins I discovered that it can be used as a spamming vector, anyone could register a user via API and then spam the site using a user token.
Ooops! May be some bad guy wanted to misuse OS for creating spamming tools from innocent victims? :( OK, Ismayil, I'll try to search for it.. Thank you..
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.