Recent changes
Wednesday November 04 2026
-
Giving a contractor access Updated Markdown page
Step by step for administrators: create a personal account for a contractor's employee in the right external user group, with no self-registration, a recorded end date, two-step sign-in if required, and a first-sign-in…
-
Reviewing stale accounts Updated Markdown page
How to find and disable external accounts nobody uses any more with Users > Check user accounts (Never signed in, Not seen for N days, filtered to the external groups), export the list for the project managers, and act…
-
Sharing files with contractors Updated Markdown page
How to share documents with contractors and partners through an Exponential extranet so only they can download them: files in the party's section, downloads checked by content/download, uploads by contractors, and what…
-
User groups and sections for extranets Updated Markdown page
How to structure an extranet in Exponential so each contractor or partner sees only its own content: one user group and one section (or subtree) per party, a role assigned with a limitation, and tests from each side.
-
Building forms Updated Markdown page
Index of the guides for building public-sector forms in Exponential - the information collector, accessible forms, spam protection and its third-party implications, CSRF form tokens, file attachments, mail to receivers…
-
Accessible forms Updated Markdown page
How to make public forms built with Exponential's information collector accessible - labels tied to fields, instructions, required marks, error messages that point to fields, keyboard use, CAPTCHA alternatives - with…
-
Consultations and polls Updated Markdown page
How to run a public consultation with a Consultation class and response form in Exponential, close it on time, publish the outcome, and when the shipped Poll class (one answer per user) is the right tool instead.
-
CSRF form tokens Updated Markdown page
How Exponential protects every POST form against cross-site request forgery with the ezformtoken extension, what visitors see when a token is refused, the secret to set per project, and what to check in your own forms.
-
File attachments in forms Updated Markdown page
How visitors can attach a file to a form in Exponential with the Enhanced File datatype of enhancedezbinaryfile, its storage limit and mail behavior, the risks of accepting files from the public, and when to use a…
-
Information collector basics Updated Markdown page
How Exponential's information collector works for public-sector forms - collector attributes in a class, the form template posting to content/action, the form, feedback and poll types of collect.ini, the result page or…
-
Mail to receivers Updated Markdown page
Who gets a mail when a form built with Exponential's information collector is sent - the default receiver, a receiver per form, the mail templates, sending settings, testing with the file transport, and what not to put…
-
Retention of collected information Updated Markdown page
How to keep form submissions in Exponential only as long as needed - who may read them, exporting to CSV with the audit record, removing collections per form or per submission, the copies that remain elsewhere, and a…
-
Spam protection and third parties Updated Markdown page
How to keep spam out of public forms built with Exponential - form tokens, the reCAPTCHA and hCaptcha datatypes and what sending visitor data to their providers means for a public body, and measures that need no third…
-
Intranets Updated Markdown page
The intranets part of building with Exponential for public bodies: a staff-only siteaccess, sections and roles for internal content, sign-in options including the kernel's LDAP handler and two-step sign-in, sessions…
-
A staff-only siteaccess Updated Markdown page
How to set up an intranet siteaccess in Exponential that requires sign-in for every page (RequireUserLogin), with its own root folder, design and address, which views stay open, and how to keep it out of search engines.
-
Intranet checklist Updated Markdown page
A launch and review checklist for a staff intranet built with Exponential: access, sections and roles, sign-in, sessions, network, search engines, audit, leavers and content ownership.
-
LDAP sign-in Updated Markdown page
What the kernel's LDAP login handler does (staff sign in with their directory account; an Exponential user is created and placed in groups), the settings in settings/ldap.ini, the PHP ldap extension it needs, and the…
-
Sections and roles for intranet content Updated Markdown page
How to keep internal content internal in Exponential: a section for intranet content that the Anonymous role cannot read, a Staff role that can, department sections for restricted material, and how to test from both…
-
Sign-in options for staff Updated Markdown page
The sign-in options an Exponential intranet has (local accounts, the LDAP and text-file login handlers of the kernel, two-step sign-in from sevenx_authentication_2fa), how login handlers are chained, and what is not…
-
Staff intranets with Exponential Updated Markdown page
What a public body needs for a staff intranet and how Exponential provides it: a siteaccess that requires sign-in, sections and roles for internal content, sign-in options (local accounts, LDAP handler, two-step…