EPrints Technical Mailing List Archive
Message: #09036
< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First
Re: [EP-tech] Altmetric badge plugin
- To: "eprints-tech@ecs.soton.ac.uk" <eprints-tech@ecs.soton.ac.uk>, John Salter <J.Salter@leeds.ac.uk>
- Subject: Re: [EP-tech] Altmetric badge plugin
- From: Will Fyson <will.fyson@cosector.com>
- Date: Fri, 12 Aug 2022 11:55:40 +0000
CAUTION: This e-mail originated outside the University of Southampton.
Hi John,
If the altmetric cgi script was passed the eprint id along with the DOI, could we then do a very quick check to make sure that DOI is on the eprint's record in the database and if not we then don't query the altmetric api? That should hopefully stop it from
being abused by others (or have I missed a very simple way of getting around that?).
Many thanks,
Will
Will Fyson
Development & Support Analyst, Research Technologies
CoSector, University of London
Senate House
Malet Street
London
WC1E 7HU
t: +44 (0)20 7863 1341
e: will.fyson@cosector.com
w: https://cosector.com/digital-research/
The University of London is an exempt charity in England and Wales.
From: eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> on behalf of John Salter via Eprints-tech <eprints-tech@ecs.soton.ac.uk>
Sent: 11 August 2022 09:34 To: eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk>; Yuri <yurj@alfa.it> Subject: Re: [EP-tech] Altmetric badge plugin
CAUTION: This e-mail originated outside the University of Southampton.
Thanks Yuri,
I've updated the screenshot and some details about installation.
You are right - the cgi script can be called from anywhere.
I'm not sure what we could do about this, if we thought we did need to do something.
Normally some form of cookie / session variable would be used to lock-down this sort of thing, but as EPrints only uses sessions for authenticated users, that feels like a lot of work for this.
What are other people's thoughts on this? Cheers, John PS I haven't had a response from Altmetric about the user-agent fix yet. From: eprints-tech-bounces@ecs.soton.ac.uk <eprints-tech-bounces@ecs.soton.ac.uk> on behalf of Yuri via Eprints-tech <eprints-tech@ecs.soton.ac.uk>
Sent: 10 August 2022 13:40 To: eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk> Subject: Re: [EP-tech] Altmetric badge plugin
CAUTION: This e-mail originated outside the University of Southampton.
You can update the screenshot in the github repo (still mention Google+). Also mention that the plugin works OOTB without any config can help.
Note: am I wrong or the /cgi/altimetrics cgi can be called from everywhere? So others could use your installed cgi as proxy to get the data from altimetrics.
Il 10/08/22 14:14, John Salter via Eprints-tech ha scritto:
|
- Follow-Ups:
- Re: [EP-tech] Altmetric badge plugin
- From: Will Fyson <will.fyson@cosector.com>
- Re: [EP-tech] Altmetric badge plugin
- References:
- [EP-tech] Altmetric badge plugin
- From: John Salter <J.Salter@leeds.ac.uk>
- Re: [EP-tech] Altmetric badge plugin
- From: Jens Witzel <jens.witzel@uzh.ch>
- Re: [EP-tech] Altmetric badge plugin
- From: Jens Witzel <jens.witzel@uzh.ch>
- Re: [EP-tech] Altmetric badge plugin
- From: John Salter <J.Salter@leeds.ac.uk>
- Re: [EP-tech] Altmetric badge plugin
- From: Yuri <yurj@alfa.it>
- Re: [EP-tech] Altmetric badge plugin
- From: John Salter <J.Salter@leeds.ac.uk>
- Re: [EP-tech] Altmetric badge plugin
- From: Will Fyson <will.fyson@cosector.com>
- [EP-tech] Altmetric badge plugin
- Prev by Date: Re: [EP-tech] Altmetric badge plugin
- Next by Date: Re: [EP-tech] Altmetric badge plugin
- Previous by thread: [EP-tech] Sort view with creators_name and corp_creators
- Index(es):