Opt-In Cookie Manager

cloudflare - CALENDAR - Opt-In Cookie Manager

cloudflare - CALENDAR

by kjh-mov » Mon May 01, 2023 10:48 am

Hello Chris,

a cookie crawler tells me that cloudflare is still being loaded.

Named (Loaded when rejection is given)
phpbb3_ddox7_u
phpbb3_ddox7_k
phpbb3_ddox7_sid and
phpbb3_ddox7_calendar_on_header.

Probably all this concerns the extension CALENDAR???

Can you help me here again so that I can act DSGVO compliant?

I have already installed the new update of your version.

Yours,
kjh-mov
Wer nichts weiß, muss alles glauben.

Marie von Ebner-Eschenbach
User avatar
kjh-mov
Registered User
Posts: 82
Joined: Mon May 07, 2018 12:23 pm

Re: cloudflare - CALENDAR

by kjh-mov » Mon May 01, 2023 11:56 am

What is the list of cookies that phpBB uses ?

viewtopic.php?t=2428331

_u = user ID, in your case 1361704 or 1 for a guest.
_sid = session ID, will change from time to time and identifies you, combined with _u.
_k = session key, only used for "remember me" feature to not always re-log in.
Wer nichts weiß, muss alles glauben.

Marie von Ebner-Eschenbach
User avatar
kjh-mov
Registered User
Posts: 82
Joined: Mon May 07, 2018 12:23 pm

Re: cloudflare - CALENDAR

by Chris1278 » Mon May 01, 2023 1:32 pm

Wich extension ist this?
phpbb3_ddox7_calendar_on_header.
Normally this one: phpbb_... belongs to the essential cookies. So not subject to approval.

As a rule, things that are externally loaded are subject to approval. But if you tell me which extension causes this cookie, I'll be happy to take a look.
User avatar
Chris1278
Jr. Extension Validator
Posts: 493
Joined: Thu Mar 14, 2019 6:07 pm

Re: cloudflare - CALENDAR

by kjh-mov » Mon May 01, 2023 3:56 pm

Angezeigter Name:
Calendar

Technischer Name:
hjw/calendar

Beschreibung:
Calendar for phpBB >=3.2.0

Version:
1.1.0

Homepage:
http://calendar.zoo-am-ring.de/
Wer nichts weiß, muss alles glauben.

Marie von Ebner-Eschenbach
User avatar
kjh-mov
Registered User
Posts: 82
Joined: Mon May 07, 2018 12:23 pm

Re: cloudflare - CALENDAR

by Chris1278 » Mon May 01, 2023 4:18 pm

Ok I checked out your site. And you don't need to do anything since this falls under essential cookies that are required for operation and do not require consent. It would be different if the extension used e.g. fonts or other scripts from an external source. But since it doesn't do this, it shouldn't be a problem, at least with regard to the calendar extension from a GDPR point of view. Especially since the cookies themselves are not the problem, only when data is sent to third parties to access external sources.

But also noted here: I am not a lawyer and of course I cannot make any legally binding statements. But in my understanding, the above should apply and therefore the extension should be GDPR compliant, provided that it still does not require any external scripts.

If you want to check your website whether external scripts are loaded, you could, for example, first load your site with Firefox and then press the key combination CTRL(CTRL)+shift+I and see what is loaded under Debugger.


It then looks like this, for example:
deb1.jpg


As a comparison, a forum where my cookie manager is not yet in it. There a script is loaded externally that would look like this:
deb2.jpg
Ok this script does not send data directly to a server. So that's the gray area. When I'm done with the forum, this will also be controlled with Cookie Manager. But for illustration it should do.
User avatar
Chris1278
Jr. Extension Validator
Posts: 493
Joined: Thu Mar 14, 2019 6:07 pm

Re: cloudflare - CALENDAR

by kjh-mov » Mon May 01, 2023 4:48 pm

Hello Chris,

the crawler grumbles and says that cloudflare is loaded and that this should not be so.
Legal forums tell us that this poses a high GDPR risk.

Since appointments are also to be organised via the calendar, I would be grateful if consent has to be given.

Yours,
kjh-mov
Wer nichts weiß, muss alles glauben.

Marie von Ebner-Eschenbach
User avatar
kjh-mov
Registered User
Posts: 82
Joined: Mon May 07, 2018 12:23 pm

Re: cloudflare - CALENDAR

by Chris1278 » Mon May 01, 2023 4:58 pm

Ok I have now downloaded your current version and searched for the term cloudflare in the code. This term does not exist in any of the files in the extension. Say the cloudflare comes from somewhere else.
User avatar
Chris1278
Jr. Extension Validator
Posts: 493
Joined: Thu Mar 14, 2019 6:07 pm

Re: cloudflare - CALENDAR

by Chris1278 » Mon May 01, 2023 5:10 pm

Ok, please check the following in your forum in the admin area:

General->Server configutration->load settings:
serv1.jpg
Allow usage of third party content delivery networks:

ser2.jpg
If this is yes, set this to no

Then please check again whether the message is still there. So with the test tool.
User avatar
Chris1278
Jr. Extension Validator
Posts: 493
Joined: Thu Mar 14, 2019 6:07 pm

Re: cloudflare - CALENDAR

by kjh-mov » Tue May 02, 2023 10:09 am

This was set correctly.

It is obviously due to the extension fontawesome from Sniper. I deactivated this. Then the message, that cloudflare is being integrated without permission, is gone. So one would have to find a solution for this. Until then, I will leave the extension deactivated.

Many thanks for the great help.

Yours
kjh-mov
Wer nichts weiß, muss alles glauben.

Marie von Ebner-Eschenbach
User avatar
kjh-mov
Registered User
Posts: 82
Joined: Mon May 07, 2018 12:23 pm