Asking for trouble? Forms library on a non-profit website. Should proprietary forms be password protected?
March 8, 2011 1:24 PM Subscribe
Asking for trouble? Forms library on a non-profit website. Should proprietary forms be password protected?
I have received a request from the financial secretary of a non-profit (I am their webmaster). He wants me to create a small forms library which would include a form for reimbursement for an expense (note: reimbursements must be approved by him and are only sent to members of our non-profit, not to outside vendors) as well as a blank form W4. Since the reimbursement form is on our letterhead, I am thinking that we may be creating the means for someone to use our name and letterhead for fraudulent purposes. Am I being too cautious? Should I put these in a password-protected portion of the site?
I have received a request from the financial secretary of a non-profit (I am their webmaster). He wants me to create a small forms library which would include a form for reimbursement for an expense (note: reimbursements must be approved by him and are only sent to members of our non-profit, not to outside vendors) as well as a blank form W4. Since the reimbursement form is on our letterhead, I am thinking that we may be creating the means for someone to use our name and letterhead for fraudulent purposes. Am I being too cautious? Should I put these in a password-protected portion of the site?
A scammer with a computer can already create a reasonable copy of your letterhead, they really aren't getting anything new out of the form, imho. I vote too cautious.
posted by nomisxid at 1:39 PM on March 8, 2011 [1 favorite]
posted by nomisxid at 1:39 PM on March 8, 2011 [1 favorite]
Best answer: Traditionally stuff like this would go on the company intranet, so it's only accessible to employees. If your company doesn't have a password protected intranet this would be a good time to set one up. You could sell it to the higher-ups as being a place to share all sorts of documents that people need to access frequently. That means you'd have to maintain it, though.
posted by MsMolly at 1:51 PM on March 8, 2011 [1 favorite]
posted by MsMolly at 1:51 PM on March 8, 2011 [1 favorite]
Best answer: I agree an intranet is probably ideal, but you'd probably be safe enough make sure it's not indexed by search engines and that it can't be turned into a tool for spam and/or database injection.
posted by yeahyeahyeahwhoo at 2:08 PM on March 8, 2011 [1 favorite]
posted by yeahyeahyeahwhoo at 2:08 PM on March 8, 2011 [1 favorite]
Response by poster: An intranet of sorts is our answer - only one page, but it will give me an excuse to add other stuff that I want to do. Thanks, all!
posted by brownrd at 4:58 PM on March 8, 2011
posted by brownrd at 4:58 PM on March 8, 2011
This thread is closed to new comments.
posted by Kimberly at 1:39 PM on March 8, 2011