JMT
02-10-2002, 12:58 PM
I run a site (www.shta.org) for the Superior Hiking Trail Association here in Minnesota. This trail has been rated as the second best long distance hiking trail in the US.
The association has asked me to provide a way for people to make contact to hike or backpack together. With that feature come a number of concerns:
-Privacy
-Liability
-Hackers
I will describe what I was considering doing and ask that akyone wishing to comment please do so.
1) I would provide a form on the site that would allow individuals/groups to create a "request" stating when, where, number of people, type of trip (hiking/backpacking) and personal information (name, phone, email). They would get a request number and password in return.
2) Using these requests I would build a page that lists them without any identifying information. People interested in responding to a post would use a form to enter their information which the web site would then email to the original requestor. The original requestor would then have the responders information and they could interface directly.
3) Requests would be dated and automatically deleted. Requestors would also be able to delete their requests using their request number.
4) The web site would clearly state that it this is a free service and it is the responsibility of the requestor and responders to do the proper due diligence to insure a safe trip.
Questions:
A) Would it make sense to have a copy of the emails sent in step 2 sent to the association for audit? We would clearly state that copies would be sent and retained.
B) Should I put some kind of check in place for vulgur or pornographic words in requests or responses?
Any comments would be welcome.
The association has asked me to provide a way for people to make contact to hike or backpack together. With that feature come a number of concerns:
-Privacy
-Liability
-Hackers
I will describe what I was considering doing and ask that akyone wishing to comment please do so.
1) I would provide a form on the site that would allow individuals/groups to create a "request" stating when, where, number of people, type of trip (hiking/backpacking) and personal information (name, phone, email). They would get a request number and password in return.
2) Using these requests I would build a page that lists them without any identifying information. People interested in responding to a post would use a form to enter their information which the web site would then email to the original requestor. The original requestor would then have the responders information and they could interface directly.
3) Requests would be dated and automatically deleted. Requestors would also be able to delete their requests using their request number.
4) The web site would clearly state that it this is a free service and it is the responsibility of the requestor and responders to do the proper due diligence to insure a safe trip.
Questions:
A) Would it make sense to have a copy of the emails sent in step 2 sent to the association for audit? We would clearly state that copies would be sent and retained.
B) Should I put some kind of check in place for vulgur or pornographic words in requests or responses?
Any comments would be welcome.