View Issue Details

This bug affects 1 person(s).
 16
IDProjectCategoryView StatusLast Update
18253Bug reportsSurvey participants (Tokens)public2022-08-27 14:58
ReporterJoffm Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status feedbackResolutionreopened 
Product Version5.3.x 
Summary18253: In an anonymized survey you can access TOKEN:ATTRIBUTEs
Description

I do not know if it is a feature or a bug.
But though I set the survey to "anonymized" I can
display the TOKEN:ATTRIBUTEs
put the attributes into a question of type text by an equation

Steps To Reproduce

Steps to reproduce

Create a token-based survey with a participant and some additional attributes.
In the survey create some questions of type "short text" (Q1, Q2)
Use an equation to fill them with the content of the attributes
{Q1=TOKEN:ATTRIBUTE_1}
I get the content in the text question.

Expected result

I should have thought that there is no possibility to access any information of the participants table in the survey.

Actual result

Now you can set the survey to "anonymized" but circumvent it by entering some personal data in the attributes.
(Write here what happened instead)

TagsNo tags attached.
Bug heat16
Complete LimeSurvey version number (& build)5.3.10. 220419
I will donate to the project if issue is resolvedNo
Browser
Database type & version10.4.21-MariaDB, but not relevant
Server OS (if known)
Webserver software & version (if known)
PHP Version7.4.24

Users monitoring this issue

User List There are no users monitoring this issue.

Activities

Joffm

Joffm

2022-07-14 10:35

reporter  

a8.PNG (13,101 bytes)   
a8.PNG (13,101 bytes)   
a7.PNG (23,944 bytes)   
a7.PNG (23,944 bytes)   
a6.PNG (11,265 bytes)   
a6.PNG (11,265 bytes)   
limesurvey_survey_214392.lss (43,778 bytes)   
<?xml version="1.0" encoding="UTF-8"?>
<document>
 <LimeSurveyDocType>Survey</LimeSurveyDocType>
 <DBVersion>486</DBVersion>
 <languages>
  <language>en</language>
  <language>de</language>
 </languages>
 <groups>
  <fields>
   <fieldname>gid</fieldname>
   <fieldname>sid</fieldname>
   <fieldname>group_order</fieldname>
   <fieldname>randomization_group</fieldname>
   <fieldname>grelevance</fieldname>
  </fields>
  <rows>
   <row>
    <gid><![CDATA[441]]></gid>
    <sid><![CDATA[214392]]></sid>
    <group_order><![CDATA[1]]></group_order>
    <randomization_group/>
    <grelevance/>
   </row>
  </rows>
 </groups>
 <group_l10ns>
  <fields>
   <fieldname>id</fieldname>
   <fieldname>gid</fieldname>
   <fieldname>group_name</fieldname>
   <fieldname>description</fieldname>
   <fieldname>language</fieldname>
   <fieldname>sid</fieldname>
   <fieldname>group_order</fieldname>
   <fieldname>randomization_group</fieldname>
   <fieldname>grelevance</fieldname>
  </fields>
  <rows>
   <row>
    <id><![CDATA[501]]></id>
    <gid><![CDATA[441]]></gid>
    <group_name><![CDATA[G1]]></group_name>
    <description/>
    <language><![CDATA[de]]></language>
    <sid><![CDATA[214392]]></sid>
    <group_order><![CDATA[1]]></group_order>
    <randomization_group/>
    <grelevance/>
   </row>
   <row>
    <id><![CDATA[502]]></id>
    <gid><![CDATA[441]]></gid>
    <group_name><![CDATA[G1]]></group_name>
    <description/>
    <language><![CDATA[en]]></language>
    <sid><![CDATA[214392]]></sid>
    <group_order><![CDATA[1]]></group_order>
    <randomization_group/>
    <grelevance/>
   </row>
  </rows>
 </group_l10ns>
 <questions>
  <fields>
   <fieldname>qid</fieldname>
   <fieldname>parent_qid</fieldname>
   <fieldname>sid</fieldname>
   <fieldname>gid</fieldname>
   <fieldname>type</fieldname>
   <fieldname>title</fieldname>
   <fieldname>preg</fieldname>
   <fieldname>other</fieldname>
   <fieldname>mandatory</fieldname>
   <fieldname>encrypted</fieldname>
   <fieldname>question_order</fieldname>
   <fieldname>scale_id</fieldname>
   <fieldname>same_default</fieldname>
   <fieldname>relevance</fieldname>
   <fieldname>question_theme_name</fieldname>
   <fieldname>modulename</fieldname>
  </fields>
  <rows>
   <row>
    <qid><![CDATA[12711]]></qid>
    <parent_qid><![CDATA[0]]></parent_qid>
    <sid><![CDATA[214392]]></sid>
    <gid><![CDATA[441]]></gid>
    <type><![CDATA[*]]></type>
    <title><![CDATA[eqQ1]]></title>
    <other><![CDATA[N]]></other>
    <mandatory><![CDATA[N]]></mandatory>
    <encrypted><![CDATA[N]]></encrypted>
    <question_order><![CDATA[1]]></question_order>
    <scale_id><![CDATA[0]]></scale_id>
    <same_default><![CDATA[0]]></same_default>
    <relevance><![CDATA[1]]></relevance>
    <question_theme_name><![CDATA[equation]]></question_theme_name>
    <modulename/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <parent_qid><![CDATA[0]]></parent_qid>
    <sid><![CDATA[214392]]></sid>
    <gid><![CDATA[441]]></gid>
    <type><![CDATA[S]]></type>
    <title><![CDATA[Q1]]></title>
    <preg/>
    <other><![CDATA[N]]></other>
    <mandatory><![CDATA[N]]></mandatory>
    <encrypted><![CDATA[N]]></encrypted>
    <question_order><![CDATA[2]]></question_order>
    <scale_id><![CDATA[0]]></scale_id>
    <same_default><![CDATA[0]]></same_default>
    <relevance><![CDATA[1]]></relevance>
    <question_theme_name><![CDATA[shortfreetext]]></question_theme_name>
    <modulename/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <parent_qid><![CDATA[0]]></parent_qid>
    <sid><![CDATA[214392]]></sid>
    <gid><![CDATA[441]]></gid>
    <type><![CDATA[S]]></type>
    <title><![CDATA[Q2]]></title>
    <preg/>
    <other><![CDATA[N]]></other>
    <mandatory><![CDATA[N]]></mandatory>
    <encrypted><![CDATA[N]]></encrypted>
    <question_order><![CDATA[3]]></question_order>
    <scale_id><![CDATA[0]]></scale_id>
    <same_default><![CDATA[0]]></same_default>
    <relevance><![CDATA[1]]></relevance>
    <question_theme_name><![CDATA[shortfreetext]]></question_theme_name>
    <modulename/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <parent_qid><![CDATA[0]]></parent_qid>
    <sid><![CDATA[214392]]></sid>
    <gid><![CDATA[441]]></gid>
    <type><![CDATA[Y]]></type>
    <title><![CDATA[Q3]]></title>
    <other><![CDATA[N]]></other>
    <mandatory><![CDATA[N]]></mandatory>
    <encrypted><![CDATA[N]]></encrypted>
    <question_order><![CDATA[4]]></question_order>
    <scale_id><![CDATA[0]]></scale_id>
    <same_default><![CDATA[0]]></same_default>
    <relevance><![CDATA[1]]></relevance>
    <question_theme_name><![CDATA[yesno]]></question_theme_name>
    <modulename/>
   </row>
  </rows>
 </questions>
 <question_l10ns>
  <fields>
   <fieldname>id</fieldname>
   <fieldname>qid</fieldname>
   <fieldname>question</fieldname>
   <fieldname>help</fieldname>
   <fieldname>script</fieldname>
   <fieldname>language</fieldname>
  </fields>
  <rows>
   <row>
    <id><![CDATA[14639]]></id>
    <qid><![CDATA[12711]]></qid>
    <question><![CDATA[<p>{Q1=TOKEN:ATTRIBUTE_1}</p>

<p>{Q2=TOKEN:ATTRIBUTE_2}</p>
]]></question>
    <help/>
    <script/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <id><![CDATA[14643]]></id>
    <qid><![CDATA[12711]]></qid>
    <question><![CDATA[<p>{Q1=TOKEN:ATTRIBUTE_1}</p>

<p>{Q2=TOKEN:ATTRIBUTE_2}</p>
]]></question>
    <help/>
    <script/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <id><![CDATA[14640]]></id>
    <qid><![CDATA[12712]]></qid>
    <question><![CDATA[Email:]]></question>
    <help/>
    <script/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <id><![CDATA[14644]]></id>
    <qid><![CDATA[12712]]></qid>
    <question><![CDATA[Q1]]></question>
    <help/>
    <script/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <id><![CDATA[14641]]></id>
    <qid><![CDATA[12713]]></qid>
    <question><![CDATA[Q2]]></question>
    <help/>
    <script/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <id><![CDATA[14645]]></id>
    <qid><![CDATA[12713]]></qid>
    <question><![CDATA[Q2]]></question>
    <help/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <id><![CDATA[14642]]></id>
    <qid><![CDATA[12714]]></qid>
    <question><![CDATA[Gefällt Dir {Q2}?]]></question>
    <help/>
    <script/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <id><![CDATA[14646]]></id>
    <qid><![CDATA[12714]]></qid>
    <question><![CDATA[Gefällt Dir {Q2}?]]></question>
    <help/>
    <language><![CDATA[en]]></language>
   </row>
  </rows>
 </question_l10ns>
 <question_attributes>
  <fields>
   <fieldname>qid</fieldname>
   <fieldname>attribute</fieldname>
   <fieldname>value</fieldname>
   <fieldname>language</fieldname>
  </fields>
  <rows>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[clear_default]]></attribute>
    <value><![CDATA[N]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[cssclass]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[equation]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[hidden]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[numbers_only]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[page_break]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[printable_help]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[printable_help]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[public_statistics]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[save_as_default]]></attribute>
    <value><![CDATA[Y]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[scale_export]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[statistics_graphtype]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12711]]></qid>
    <attribute><![CDATA[statistics_showgraph]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[clear_default]]></attribute>
    <value><![CDATA[N]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[cssclass]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[display_rows]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[em_validation_q]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[em_validation_q_tip]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[em_validation_q_tip]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[hidden]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[hide_tip]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[input_size]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_city]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_country]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_defaultcoordinates]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_mapheight]]></attribute>
    <value><![CDATA[300]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_mapservice]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_mapwidth]]></attribute>
    <value><![CDATA[500]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_mapzoom]]></attribute>
    <value><![CDATA[11]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_nodefaultfromip]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_postal]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[location_state]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[maximum_chars]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[numbers_only]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[page_break]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[prefix]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[prefix]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[random_group]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[save_as_default]]></attribute>
    <value><![CDATA[Y]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[statistics_graphtype]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[statistics_showgraph]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[statistics_showmap]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[suffix]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[suffix]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[text_input_width]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_action]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_countdown_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_countdown_message]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_disable_next]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_disable_prev]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_message]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_message_delay]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_message_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_timer_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_2]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_2_display_time]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_2_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_2_message]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_2_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_display_time]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_message]]></attribute>
    <value/>
    <language><![CDATA[en]]></language>
   </row>
   <row>
    <qid><![CDATA[12712]]></qid>
    <attribute><![CDATA[time_limit_warning_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[clear_default]]></attribute>
    <value><![CDATA[N]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[cssclass]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[display_rows]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[em_validation_q]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[em_validation_q_tip]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[hidden]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[hide_tip]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[input_size]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_city]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_country]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_defaultcoordinates]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_mapheight]]></attribute>
    <value><![CDATA[300]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_mapservice]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_mapwidth]]></attribute>
    <value><![CDATA[500]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_mapzoom]]></attribute>
    <value><![CDATA[11]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_nodefaultfromip]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_postal]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[location_state]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[maximum_chars]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[numbers_only]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[page_break]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[prefix]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[random_group]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[save_as_default]]></attribute>
    <value><![CDATA[Y]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[statistics_graphtype]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[statistics_showgraph]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[statistics_showmap]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[suffix]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[text_input_width]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_action]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_countdown_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_disable_next]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_disable_prev]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_message_delay]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_message_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_timer_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_2]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_2_display_time]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_2_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_2_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_display_time]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_message]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12713]]></qid>
    <attribute><![CDATA[time_limit_warning_style]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[cssclass]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[display_type]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[hidden]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[hide_tip]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[page_break]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[printable_help]]></attribute>
    <value/>
    <language><![CDATA[de]]></language>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[public_statistics]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[random_group]]></attribute>
    <value/>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[save_as_default]]></attribute>
    <value><![CDATA[Y]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[scale_export]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[statistics_graphtype]]></attribute>
    <value><![CDATA[0]]></value>
    <language/>
   </row>
   <row>
    <qid><![CDATA[12714]]></qid>
    <attribute><![CDATA[statistics_showgraph]]></attribute>
    <value><![CDATA[1]]></value>
    <language/>
   </row>
  </rows>
 </question_attributes>
 <surveys>
  <fields>
   <fieldname>sid</fieldname>
   <fieldname>gsid</fieldname>
   <fieldname>admin</fieldname>
   <fieldname>expires</fieldname>
   <fieldname>startdate</fieldname>
   <fieldname>adminemail</fieldname>
   <fieldname>anonymized</fieldname>
   <fieldname>faxto</fieldname>
   <fieldname>format</fieldname>
   <fieldname>savetimings</fieldname>
   <fieldname>template</fieldname>
   <fieldname>language</fieldname>
   <fieldname>additional_languages</fieldname>
   <fieldname>datestamp</fieldname>
   <fieldname>usecookie</fieldname>
   <fieldname>allowregister</fieldname>
   <fieldname>allowsave</fieldname>
   <fieldname>autonumber_start</fieldname>
   <fieldname>autoredirect</fieldname>
   <fieldname>allowprev</fieldname>
   <fieldname>printanswers</fieldname>
   <fieldname>ipaddr</fieldname>
   <fieldname>ipanonymize</fieldname>
   <fieldname>refurl</fieldname>
   <fieldname>showsurveypolicynotice</fieldname>
   <fieldname>publicstatistics</fieldname>
   <fieldname>publicgraphs</fieldname>
   <fieldname>listpublic</fieldname>
   <fieldname>htmlemail</fieldname>
   <fieldname>sendconfirmation</fieldname>
   <fieldname>tokenanswerspersistence</fieldname>
   <fieldname>assessments</fieldname>
   <fieldname>usecaptcha</fieldname>
   <fieldname>usetokens</fieldname>
   <fieldname>bounce_email</fieldname>
   <fieldname>attributedescriptions</fieldname>
   <fieldname>emailresponseto</fieldname>
   <fieldname>emailnotificationto</fieldname>
   <fieldname>tokenlength</fieldname>
   <fieldname>showxquestions</fieldname>
   <fieldname>showgroupinfo</fieldname>
   <fieldname>shownoanswer</fieldname>
   <fieldname>showqnumcode</fieldname>
   <fieldname>bouncetime</fieldname>
   <fieldname>bounceprocessing</fieldname>
   <fieldname>bounceaccounttype</fieldname>
   <fieldname>bounceaccounthost</fieldname>
   <fieldname>bounceaccountpass</fieldname>
   <fieldname>bounceaccountencryption</fieldname>
   <fieldname>bounceaccountuser</fieldname>
   <fieldname>showwelcome</fieldname>
   <fieldname>showprogress</fieldname>
   <fieldname>questionindex</fieldname>
   <fieldname>navigationdelay</fieldname>
   <fieldname>nokeyboard</fieldname>
   <fieldname>alloweditaftercompletion</fieldname>
   <fieldname>googleanalyticsstyle</fieldname>
   <fieldname>googleanalyticsapikey</fieldname>
   <fieldname>tokenencryptionoptions</fieldname>
  </fields>
  <rows>
   <row>
    <sid><![CDATA[214392]]></sid>
    <gsid><![CDATA[1]]></gsid>
    <admin><![CDATA[inherit]]></admin>
    <adminemail><![CDATA[inherit]]></adminemail>
    <anonymized><![CDATA[Y]]></anonymized>
    <faxto/>
    <format><![CDATA[I]]></format>
    <savetimings><![CDATA[N]]></savetimings>
    <template><![CDATA[inherit]]></template>
    <language><![CDATA[de]]></language>
    <additional_languages><![CDATA[en]]></additional_languages>
    <datestamp><![CDATA[N]]></datestamp>
    <usecookie><![CDATA[I]]></usecookie>
    <allowregister><![CDATA[I]]></allowregister>
    <allowsave><![CDATA[I]]></allowsave>
    <autonumber_start><![CDATA[0]]></autonumber_start>
    <autoredirect><![CDATA[I]]></autoredirect>
    <allowprev><![CDATA[I]]></allowprev>
    <printanswers><![CDATA[I]]></printanswers>
    <ipaddr><![CDATA[N]]></ipaddr>
    <ipanonymize><![CDATA[N]]></ipanonymize>
    <refurl><![CDATA[N]]></refurl>
    <showsurveypolicynotice><![CDATA[0]]></showsurveypolicynotice>
    <publicstatistics><![CDATA[I]]></publicstatistics>
    <publicgraphs><![CDATA[I]]></publicgraphs>
    <listpublic><![CDATA[I]]></listpublic>
    <htmlemail><![CDATA[I]]></htmlemail>
    <sendconfirmation><![CDATA[I]]></sendconfirmation>
    <tokenanswerspersistence><![CDATA[I]]></tokenanswerspersistence>
    <assessments><![CDATA[I]]></assessments>
    <usecaptcha><![CDATA[E]]></usecaptcha>
    <usetokens><![CDATA[N]]></usetokens>
    <bounce_email><![CDATA[inherit]]></bounce_email>
    <attributedescriptions><![CDATA[{"firstname":{"encrypted":"N"},"lastname":{"encrypted":"N"},"email":{"encrypted":"N"},"attribute_1":{"description":"a1","mandatory":"N","encrypted":"N","show_register":"N","cpdbmap":""},"attribute_2":{"description":"a2","mandatory":"N","encrypted":"N","show_register":"N","cpdbmap":""}}]]></attributedescriptions>
    <emailresponseto><![CDATA[inherit]]></emailresponseto>
    <emailnotificationto><![CDATA[inherit]]></emailnotificationto>
    <tokenlength><![CDATA[-1]]></tokenlength>
    <showxquestions><![CDATA[I]]></showxquestions>
    <showgroupinfo><![CDATA[I]]></showgroupinfo>
    <shownoanswer><![CDATA[I]]></shownoanswer>
    <showqnumcode><![CDATA[I]]></showqnumcode>
    <bounceprocessing><![CDATA[N]]></bounceprocessing>
    <showwelcome><![CDATA[Y]]></showwelcome>
    <showprogress><![CDATA[I]]></showprogress>
    <questionindex><![CDATA[-1]]></questionindex>
    <navigationdelay><![CDATA[-1]]></navigationdelay>
    <nokeyboard><![CDATA[I]]></nokeyboard>
    <alloweditaftercompletion><![CDATA[I]]></alloweditaftercompletion>
    <googleanalyticsstyle/>
    <googleanalyticsapikey/>
    <tokenencryptionoptions><![CDATA[{"enabled":"Y","columns":{"firstname":"N","lastname":"N","email":"N"}}]]></tokenencryptionoptions>
   </row>
  </rows>
 </surveys>
 <surveys_languagesettings>
  <fields>
   <fieldname>surveyls_survey_id</fieldname>
   <fieldname>surveyls_language</fieldname>
   <fieldname>surveyls_title</fieldname>
   <fieldname>surveyls_description</fieldname>
   <fieldname>surveyls_welcometext</fieldname>
   <fieldname>surveyls_endtext</fieldname>
   <fieldname>surveyls_policy_notice</fieldname>
   <fieldname>surveyls_policy_error</fieldname>
   <fieldname>surveyls_policy_notice_label</fieldname>
   <fieldname>surveyls_url</fieldname>
   <fieldname>surveyls_urldescription</fieldname>
   <fieldname>surveyls_email_invite_subj</fieldname>
   <fieldname>surveyls_email_invite</fieldname>
   <fieldname>surveyls_email_remind_subj</fieldname>
   <fieldname>surveyls_email_remind</fieldname>
   <fieldname>surveyls_email_register_subj</fieldname>
   <fieldname>surveyls_email_register</fieldname>
   <fieldname>surveyls_email_confirm_subj</fieldname>
   <fieldname>surveyls_email_confirm</fieldname>
   <fieldname>surveyls_dateformat</fieldname>
   <fieldname>surveyls_attributecaptions</fieldname>
   <fieldname>email_admin_notification_subj</fieldname>
   <fieldname>email_admin_notification</fieldname>
   <fieldname>email_admin_responses_subj</fieldname>
   <fieldname>email_admin_responses</fieldname>
   <fieldname>surveyls_numberformat</fieldname>
   <fieldname>attachments</fieldname>
  </fields>
  <rows>
   <row>
    <surveyls_survey_id><![CDATA[214392]]></surveyls_survey_id>
    <surveyls_language><![CDATA[de]]></surveyls_language>
    <surveyls_title><![CDATA[Anonyme Attribute]]></surveyls_title>
    <surveyls_description/>
    <surveyls_welcometext/>
    <surveyls_endtext/>
    <surveyls_policy_notice/>
    <surveyls_policy_notice_label/>
    <surveyls_url/>
    <surveyls_urldescription/>
    <surveyls_email_invite_subj><![CDATA[Einladung zu einer Umfrage]]></surveyls_email_invite_subj>
    <surveyls_email_invite><![CDATA[Hallo {FIRSTNAME},<br />
<br />
Hiermit möchten wir dich zu einer Umfrage einladen.<br />
<br />
Der Titel der Umfrage ist <br />
"{SURVEYNAME}"<br />
<br />
"{SURVEYDESCRIPTION}"<br />
<br />
Um an dieser Umfrage teilzunehmen, klicke bitte auf den unten stehenden Link.<br />
<br />
Mit freundlichen Grüßen,<br />
<br />
{ADMINNAME} ({ADMINEMAIL})<br />
<br />
----------------------------------------------<br />
Klicke hier um die Umfrage zu starten:<br />
{SURVEYURL}<br />
<br />
Wenn Sie an diese Umfrage nicht teilnehmen und keine weiteren Erinnerungen erhalten möchten, klicken Sie bitte auf den folgenden Link:<br />
{OPTOUTURL}<br />
<br />
Wenn Sie geblockt sind, jedoch wieder teilnehmen und weitere Einladungen erhalten möchten, klicken Sie bitte auf den folgenden Link:<br />
{OPTINURL}]]></surveyls_email_invite>
    <surveyls_email_remind_subj><![CDATA[Erinnerung an die Teilnahme an einer Umfrage]]></surveyls_email_remind_subj>
    <surveyls_email_remind><![CDATA[Hallo {FIRSTNAME},<br />
<br />
Vor kurzem haben wir dich zu einer Umfrage eingeladen.<br />
<br />
Zu unserem Bedauern haben wir bemerkt, dass du die Umfrage noch nicht ausgefüllt hast. Wir möchten dir mitteilen, dass die Umfrage noch aktiv ist, und würden uns freuen, wenn du teilnehmen könntest.<br />
<br />
Der Titel der Umfrage ist <br />
'{SURVEYNAME}'<br />
<br />
'{SURVEYDESCRIPTION}'<br />
<br />
Um an dieser Umfrage teilzunehmen, klicke bitte auf den unten stehenden Link.<br />
<br />
 Mit freundlichen Grüßen,<br />
<br />
{ADMINNAME} ({ADMINEMAIL})<br />
<br />
----------------------------------------------<br />
Klicke hier, um die Umfrage zu starten:<br />
{SURVEYURL}<br />
<br />
Wenn Sie an diese Umfrage nicht teilnehmen und keine weiteren Erinnerungen erhalten möchten, klicken Sie bitte auf den folgenden Link:<br />
{OPTOUTURL}]]></surveyls_email_remind>
    <surveyls_email_register_subj><![CDATA[Registrierungsbestätigung für Teilnahmeumfrage]]></surveyls_email_register_subj>
    <surveyls_email_register><![CDATA[Hallo {FIRSTNAME},<br />
<br />
du (oder jemand, der deine E-Mail-Adresse angegeben hat) hast dich für eine Umfrage mit dem Titel {SURVEYNAME} angemeldet.<br />
<br />
Um an dieser Umfrage teilzunehmen, klicke bitte auf folgenden Link:<br />
<br />
{SURVEYURL}<br />
<br />
Wenn du irgendwelche Fragen zu dieser Umfrage hast oder wenn du dich nicht für diese Umfrage angemeldet hast und glaubst, dass dir diese E-Mail irrtümlicherweise zugeschickt worden ist, kontaktiere bitte {ADMINNAME} unter {ADMINEMAIL}.]]></surveyls_email_register>
    <surveyls_email_confirm_subj><![CDATA[Bestätigung für die Teilnahme an unserer Umfrage]]></surveyls_email_confirm_subj>
    <surveyls_email_confirm><![CDATA[Hallo {FIRSTNAME},<br />
<br />
Vielen Dank für die Teilnahme an der Umfrage mit dem Titel {SURVEYNAME}. Deine Antworten wurden bei uns gespeichert.<br />
<br />
Wenn du irgendwelche Fragen zu dieser E-Mail hast, kontaktiere bitte {ADMINNAME} unter {ADMINEMAIL}.<br />
<br />
Mit freundlichen Grüßen,<br />
<br />
{ADMINNAME}]]></surveyls_email_confirm>
    <surveyls_dateformat><![CDATA[1]]></surveyls_dateformat>
    <surveyls_attributecaptions><![CDATA[{"attribute_1":"a1","attribute_2":"a2"}]]></surveyls_attributecaptions>
    <email_admin_notification_subj><![CDATA[Antwortabsendung für Umfrage {SURVEYNAME}]]></email_admin_notification_subj>
    <email_admin_notification><![CDATA[Hallo,<br />
<br />
Eine neue Antwort wurde für die Umfrage '{SURVEYNAME}' abgegeben.<br />
<br />
Klicke auf den folgenden Link um den Antwortdatensatz anzusehen:<br />
{VIEWRESPONSEURL}<br />
<br />
Klicke auf den folgenden Link um den Antwortdatensatz zu bearbeiten:<br />
{EDITRESPONSEURL}<br />
<br />
Um die Statistik zu sehen, klicke hier:<br />
{STATISTICSURL}]]></email_admin_notification>
    <email_admin_responses_subj><![CDATA[Antwortabsendung für Umfrage {SURVEYNAME} mit Ergebnissen]]></email_admin_responses_subj>
    <email_admin_responses><![CDATA[Hallo,<br />
<br />
Eine neue Antwort wurde für die Umfrage '{SURVEYNAME}' abgegeben.<br />
<br />
Klicken Sie auf den folgenden Link um den Antwortdatensatz anzusehen:<br />
{VIEWRESPONSEURL}<br />
<br />
Klicken Sie auf den folgenden Link um den Antwortdatensatz zu bearbeiten:<br />
{EDITRESPONSEURL}<br />
<br />
Um die Statistik zu sehen, klicken Sie hier:<br />
{STATISTICSURL}<br />
<br />
<br />
Die folgenden Antworten wurden vom Teilnehmer gegeben:<br />
{ANSWERTABLE}]]></email_admin_responses>
    <surveyls_numberformat><![CDATA[1]]></surveyls_numberformat>
   </row>
   <row>
    <surveyls_survey_id><![CDATA[214392]]></surveyls_survey_id>
    <surveyls_language><![CDATA[en]]></surveyls_language>
    <surveyls_title/>
    <surveyls_url/>
    <surveyls_email_invite_subj><![CDATA[Invitation to participate in a survey]]></surveyls_email_invite_subj>
    <surveyls_email_invite><![CDATA[Dear {FIRSTNAME},<br />
<br />
you have been invited to participate in a survey.<br />
<br />
The survey is titled:<br />
"{SURVEYNAME}"<br />
<br />
"{SURVEYDESCRIPTION}"<br />
<br />
To participate, please click on the link below.<br />
<br />
Sincerely,<br />
<br />
{ADMINNAME} ({ADMINEMAIL})<br />
<br />
----------------------------------------------<br />
Click here to do the survey:<br />
{SURVEYURL}<br />
<br />
If you do not want to participate in this survey and don't want to receive any more invitations please click the following link:<br />
{OPTOUTURL}<br />
<br />
If you are blacklisted but want to participate in this survey and want to receive invitations please click the following link:<br />
{OPTINURL}]]></surveyls_email_invite>
    <surveyls_email_remind_subj><![CDATA[Reminder to participate in a survey]]></surveyls_email_remind_subj>
    <surveyls_email_remind><![CDATA[Dear {FIRSTNAME},<br />
<br />
Recently we invited you to participate in a survey.<br />
<br />
We note that you have not yet completed the survey, and wish to remind you that the survey is still available should you wish to take part.<br />
<br />
The survey is titled:<br />
"{SURVEYNAME}"<br />
<br />
"{SURVEYDESCRIPTION}"<br />
<br />
To participate, please click on the link below.<br />
<br />
Sincerely,<br />
<br />
{ADMINNAME} ({ADMINEMAIL})<br />
<br />
----------------------------------------------<br />
Click here to do the survey:<br />
{SURVEYURL}<br />
<br />
If you do not want to participate in this survey and don't want to receive any more invitations please click the following link:<br />
{OPTOUTURL}]]></surveyls_email_remind>
    <surveyls_email_register_subj><![CDATA[Survey registration confirmation]]></surveyls_email_register_subj>
    <surveyls_email_register><![CDATA[Dear {FIRSTNAME},<br />
<br />
You, or someone using your email address, have registered to participate in an online survey titled {SURVEYNAME}.<br />
<br />
To complete this survey, click on the following URL:<br />
<br />
{SURVEYURL}<br />
<br />
If you have any questions about this survey, or if you did not register to participate and believe this email is in error, please contact {ADMINNAME} at {ADMINEMAIL}.]]></surveyls_email_register>
    <surveyls_email_confirm_subj><![CDATA[Confirmation of your participation in our survey]]></surveyls_email_confirm_subj>
    <surveyls_email_confirm><![CDATA[Dear {FIRSTNAME},<br />
<br />
this email is to confirm that you have completed the survey titled {SURVEYNAME} and your response has been saved. Thank you for participating.<br />
<br />
If you have any further questions about this email, please contact {ADMINNAME} on {ADMINEMAIL}.<br />
<br />
Sincerely,<br />
<br />
{ADMINNAME}]]></surveyls_email_confirm>
    <surveyls_dateformat><![CDATA[9]]></surveyls_dateformat>
    <email_admin_notification_subj><![CDATA[Response submission for survey {SURVEYNAME}]]></email_admin_notification_subj>
    <email_admin_notification><![CDATA[Hello,<br />
<br />
A new response was submitted for your survey '{SURVEYNAME}'.<br />
<br />
Click the following link to see the individual response:<br />
{VIEWRESPONSEURL}<br />
<br />
Click the following link to edit the individual response:<br />
{EDITRESPONSEURL}<br />
<br />
View statistics by clicking here:<br />
{STATISTICSURL}]]></email_admin_notification>
    <email_admin_responses_subj><![CDATA[Response submission for survey {SURVEYNAME} with results]]></email_admin_responses_subj>
    <email_admin_responses><![CDATA[Hello,<br />
<br />
A new response was submitted for your survey '{SURVEYNAME}'.<br />
<br />
Click the following link to see the individual response:<br />
{VIEWRESPONSEURL}<br />
<br />
Click the following link to edit the individual response:<br />
{EDITRESPONSEURL}<br />
<br />
View statistics by clicking here:<br />
{STATISTICSURL}<br />
<br />
<br />
The following answers were given by the participant:<br />
{ANSWERTABLE}]]></email_admin_responses>
    <surveyls_numberformat><![CDATA[0]]></surveyls_numberformat>
   </row>
  </rows>
 </surveys_languagesettings>
 <themes>
  <theme>
   <sid>214392</sid>
   <template_name>fruity</template_name>
   <config>
    <options>inherit</options>
   </config>
  </theme>
 </themes>
 <themes_inherited>
  <theme>
   <sid>214392</sid>
   <template_name>fruity</template_name>
   <config>
    <options>
     <ajaxmode>off</ajaxmode>
     <brandlogo>on</brandlogo>
     <brandlogofile>themes/survey/fruity/files/logo.png</brandlogofile>
     <container>on</container>
     <backgroundimage>off</backgroundimage>
     <animatebody>off</animatebody>
     <bodyanimation>fadeInRight</bodyanimation>
     <bodyanimationduration>500</bodyanimationduration>
     <animatequestion>off</animatequestion>
     <questionanimation>flipInX</questionanimation>
     <questionanimationduration>500</questionanimationduration>
     <animatealert>off</animatealert>
     <alertanimation>shake</alertanimation>
     <alertanimationduration>500</alertanimationduration>
     <font>noto</font>
     <bodybackgroundcolor>#ffffff</bodybackgroundcolor>
     <fontcolor>#444444</fontcolor>
     <questionbackgroundcolor>#ffffff</questionbackgroundcolor>
     <questionborder>on</questionborder>
     <questioncontainershadow>on</questioncontainershadow>
     <checkicon>f00c</checkicon>
     <animatecheckbox>on</animatecheckbox>
     <checkboxanimation>rubberBand</checkboxanimation>
     <checkboxanimationduration>500</checkboxanimationduration>
     <animateradio>on</animateradio>
     <radioanimation>zoomIn</radioanimation>
     <radioanimationduration>500</radioanimationduration>
     <zebrastriping>off</zebrastriping>
     <stickymatrixheaders>off</stickymatrixheaders>
     <greyoutselected>off</greyoutselected>
     <hideprivacyinfo>off</hideprivacyinfo>
     <crosshover>off</crosshover>
     <showpopups>1</showpopups>
     <showclearall>off</showclearall>
     <questionhelptextposition>top</questionhelptextposition>
     <notables>1</notables>
    </options>
   </config>
  </theme>
 </themes_inherited>
</document>
limesurvey_survey_214392.lss (43,778 bytes)   
Joffm

Joffm

2022-07-14 10:59

reporter   ~70928

LS shows this behaviour still in 5.3.20.

holch

holch

2022-07-14 16:33

reporter   ~70939

This is a very concerning behavior and no data from the token table should be possible to transfer to the survey if the survey is "anonymous", as then it is not.

gabrieljenik

gabrieljenik

2022-07-14 16:50

manager   ~70940

Well, anonymous responses and token attributes are not opposites.
If they were, we wouldn't be able to use both featres at the same time.

Anonymous responses: your survey is set to anonymize responses - there will be no way to connect answers and participants.
https://manual.limesurvey.org/Participant_settings#Anonymized_responses

Still, you can access the token attributes while taking the survey.

gabrieljenik

gabrieljenik

2022-07-14 16:51

manager   ~70941

Please let me know what you think.
Not sure if this is a bug

holch

holch

2022-07-14 18:14

reporter   ~70945

"Still, you can access the token attributes while taking the survey."

Then the survey is NOT anonymous. I can use some kind of ID (Name, Email, etc.), from the token table, save it into the answer table. So THERE IS a way to connect answers and participants.

In this case, all the text about anonymity at the beginning is totally wrong and misleading. We can't claim that if we allow to pass or access any attribute from the token table to the survey or answer table.

"Well, anonymous responses and token attributes are not opposites."
They no opposites, as long as you can't acces them from the survey. As soon as we give the possibility to access token attributes within the survey in anonymous mode, we can't guarantee technical anonymity anymore.

For a anonymous mode within in Limesurvey, there can't be any possible connections between the token table and the answer table. In my opinion even the information of who completed the survey and who didn't should be able to be connected with the token table.

I am really, really, really suprised by this answer and that this seems to be a feature rather than a bug.

gabrieljenik

gabrieljenik

2022-07-14 18:20

manager   ~70946

We can't claim that if we allow to pass or access any attribute from the token table to the survey or answer table.

Well, that depends on how the survey is coded.
Not up to the tool.

I will leave the discussion to @c_schmitz

holch

holch

2022-07-14 18:56

reporter   ~70947

Well, that depends on how the survey is coded.

Correct. But we can't show the standard paragraph for anonymous surveys, which comes from Limesurvey:

"If you used an identifying code, please rest assured that this code will not be stored together with your responses". How can we claim this? Correct: We can't! Because the programmer can easily pass the token, etc. to the response table.

"There is no way of matching identification access codes with survey responses" --> Also obviously not true. And you don't even need to hack the Limesurvey code. A simple {TOKEN} is sufficient.

How can we call this an anoymous mode? correct: We can't.

c_schmitz

c_schmitz

2022-07-14 20:02

administrator   ~70949

With enough criminal energy, I see several other ways to disable anonymity.
For example: I could use JavaScript and record the URL parameters and save the token access code along with reponse ID in a hidden field.
So what?

The text is for normal users who don't want to cheat their participants.

In the end, whoever uses and maintains the software is responsible to keep their data protection promises ("With great power comes great responsibility").

holch

holch

2022-07-14 21:01

reporter   ~70950

In my opinion it is a huge difference if someone uses "enough criminal energy" to disable anonymity or if they use a simple built in feature that is documented and accessible to anyone with half a brain. I don't think we can use the statements in the anonymity text if we allow expression manager to access data from the token table. Then let's just take out the whole anonymous mode completely, because the way it is it doesn't serve any purpose and might lead to false expectations.

Just because someone can break something with enough criminal energy, I don't think we should make false promises.

I am quite surprised about this "laissez-faire" approach to data protection and anonymity.

jelo

jelo

2022-07-14 23:29

partner   ~70953

The anonymous mode is working correctly. It's about the token that is not saved into the response set.
Having access to the participants attributes is no breach of that.

The participants attributes can be needed for questions wording in an anonymous survey.
You can find cases where the survey is not anonymous without access the attributes.
LimeSurvey has no variables which will be erased after the session. If you want to ask questions about a workgroup and want to mention the workgroupname in the question, you do that with attributes. That way everyone gets the same question with a different wording, but nowhere in the response the workgroup is revealed.

It's not the first time this issue pops up.
Anonymous mode = no token saved in the response set. Nothing more nothing less.
I currently cannot see a bug to fix. The expectation management is always tricky when it comes to "anonymous" modes.

c_schmitz

c_schmitz

2022-07-14 23:47

administrator   ~70954

Thanks, jelo, totally agree.

The description of this feature is 'Anonymized responses' and it exactly doing that in the way of a simple solution.

The text ("If you used an identifying code, please rest assured that this code will not be stored together with your responses [..]") has no meaning in the way that a survey admin could show any text to the survey participant to promise anonymity.
In the end a participant never can really tell if his/her data is kept anonymously.
You don't need to cheat the functionality (and yourself as a survey admin) for this.

Mazi

Mazi

2022-07-15 12:32

updater   ~70956

Last edited: 2022-07-15 12:33

While I understand the concerns brought up by @holch, I second the statements by @c_schmitz: The anonymous setting first of all means that we do not store the token with the responses.

@jelo summed up the situation pretty well: There may be cases requiring some token attribute details within the survey. It is up to the survey admin how they deal with it. If they use this to break anonimity, it is the survey admin not playing fair and cheating on the participants, it is not a fualty software design.

To give you another example: We have set up a 360° survey and have additional attributes to define the user roles like self, boss, employee. Depending on that, different email text snippets are used as well as different question texts.
Furthermore, we are using a custom link to the survey to populate hidden questions by URL. In this case, we use another attribute holding the department details and that populates a hidden single choice question by survey URL. The goal is to later analyse data by department (you could already consider this a breach of anonymity). Of course this was discussed with the customer and is actually a must-have feature to them.
So changing this behavior within Limesurvey is a No Go to us, it will not only crash several of our projects but also cause trouble for many other people.

BTW, since even using real email addresses at anonymous surveys is raising concerns for some people, we have created a plugin that allows you to easily overwrite participant details at the token table, see https://survey-consulting.com/product/anonymizer-limesurvey-plugin-to-anonymize-limesurvey-surveys/
That helps to mass-anonymize participant data with a few clicks.

holch

holch

2022-07-15 16:31

reporter   ~70965

@Mazi: "But I need it" is not a good argument. ;-)

For situations like this, you already have the normal mode. You can access anything in the token table there.

Now an anonymous mode that allows to access all information in the token table and store it to the response table has nothing to do with anonymous. Oh, the token is not stored in the answer table by default? Great. But with a simple {TOKEN} you can still store it in the response table. So why having this fake anonymous mode anyway?

Some of you argue that you have to trust the survey admin to not do that. So far so good. This is what I would call "ethical anonymity" and we practice this in market research for decades. I am fine with that. But we do not communicate to participants that we can't do it, we promise them that we won't do it. There is a small but important difference in that, don't you agree?

Now imagine you are a normal survey respondent, you read the default text about anonymity. I am sure that you will read it as it is, "please rest assured that this code will not be stored with your responses". Now, I am learning from this bug report, we can't even remotely assure the respondents about this, because it is technically not possible at the moment. And I am not talking about someone with "criminal" energy hacking Limesurvey or finding a tricky and genius way around it. No, it is a normal Limesurvey feature called Expression Manager or Expression Script or whatever it is called today. A simple {TOKEN} or {TOKEN:NAME} or {TOKEN:ATTRIBUTE_x] written into a hidden question and all the promissed made in the standard text is gone. The survey owner might not even do it in bad faith to include the token into the response table with {TOKEN}, they just don't think about it.

So at a minimum we should get rid of this standard text, and allow the survey admin to include their own text. If they then make false promissed, at least it is not falling back on Limesurvey.

I have never really used the anonymous mode, because for most of what we do we NEED the connection to the token table. So this hit me by surprise (and I might have given even wrong advice in the forum, because it would never come to mind that the anonymous mode is so ridiculous :-) ).

In any of our projects I would probably never say "rest assured that the code will not be stored/connected with your responses". What we do in market research is telling respondent that we won't analyse their responses in connection with their personal data, which is quite different. Respondents need to trust us that we won't, while when you read the standard text respondents will think we simply can't, even if we would want to.

So I still do not agree with this not being an issue, especially together with the standard text that Limesurvey shows. Respondents will expect that there is no way (at least no built in way) to make a connection between their access code and their responses on a technical level, which is clearly not the case. So I still feel really uncomfortable with the way this "anonymous mode light" is presented to the respondents. To be honest, given the ease of getting around it with standard tools of Limesurvey, in my opinion this mode is useless as it is as is. People still need to trust the survey admin not to pass the token into the response table. Not much difference to the normal mode, where they need to trust to not analyse the results together with their personal data.

I am surprised that even @Jelo thinks this is just fine. So I guess the majority doesn't see an issue with this and as this bug report was set to "resolved already, I guess there is no need to any further discussion. It doesn't affect me personally, as I would never use this mode in research practice anyway. But I find it dangerous to "sell" this "feature" as an "anonymous mode". Yet another reason to stay away from it.

Anyway, a great weekend to everyone.

jelo

jelo

2022-07-15 17:23

partner   ~70967

@holch
You state "Respondents will expect that there is no way (at least no built in way) to make a connection between their access code
and their responses on a technical level, which is clearly not the case".

The access code is not saved in the response set.
The whole purpose of this anonymous mode is to ensure that a survey can use tokens, which are not saved into the response set.
Nothing more, nothing less.

Qualtrics calls that function "anonymous link", which e.g. still saves IP-Address and location data by default.
https://www.qualtrics.com/support/survey-platform/distributions-module/web-distribution/anonymous-link/

The info texts, which LimeSurvey is showing be default to explain modes should be removed. The survey creator/conductor should write the explanations to ensure that everybody understands the options. If you are forced to write an explanation, you need to understand the stuff.

holch

holch

2022-07-15 17:36

reporter   ~70970

@jelo
I have no issue with having this mode included into Limesurvey. I don't see the big advantage, of not having the access code in the response table, but others might see that differently.

But in connection with the info text shown by default we create expectations that can't be met with the current "anonymous mode" in Limesurvey, which I see as an issue.

Regarding Qualtrics "anonymous link": Can you pipe identifying information into the results table like you can in Limesurvey?

Mazi

Mazi

2022-07-16 14:22

updater   ~70979

@holch, I agree to "So at a minimum we should get rid of this standard text, and allow the survey admin to include their own text.". We are often asked how to adjust or remove this text which is not easily doable. You have to edit the template and/or translation file or add some JS to overwrite the details.
We usually remove the default text from customer templates and tell them to add their own text within the welcome message.

@c_schmitz, that being said, what do you think about adding a setting to
a) switch of the default text and maybe also
b) allow adding your own text?

Implementing a) is rather straightforward, that could be a them option or survey setting.
For b) the adjustments are more complex. I do not see an urgent need for this since you could also add your own text to the welcome message.

jelo

jelo

2022-07-18 10:22

partner   ~70986

@holch
Yes, you can access embedded data from the contact list.
The anonymous link alone is not preventing all functions to access embedded data.
E.g.
https://community.qualtrics.com/XMcommunity/discussion/308/how-can-i-access-embedded-contact-list-data-when-anonymous-links-qr-codes-are-also-used

Qualtrics offer functions "AnonymizingResponses" to remove data from the response set during the survey.
https://blogs.sap.com/2019/10/15/are-qualtrics-surveys-really-anonymous-oh-yes-very-much./

DenisChenu

DenisChenu

2022-07-20 09:06

developer   ~71039

If we can use and save {TOKEN:TOKEN} in response data : we muts not call it anomnymous.

Why not

  1. Not anonymous : save token column
  2. Semi anonymous : don't save token column, but allow {TOKEN:XXX} usage
  3. Really anonymous : no token column + disable any {TOKEN:XXX} usage

Some real user really need Survey manager user can update survey content but can not access token part.
They give : content + response update right to SurveyManager but not Settings+token …

tammo

tammo

2022-08-12 11:20

developer   ~71430

I agree with @DenisChenu: will need good explanation and wording of the concept.

  1. Coupled research: answer tabel and respondents table are matched
  2. De-coupled research: answer tabel and respondents table are not matched by default, but fields can be matched by survey developer (in advance, not afterwards)
  3. Technically completely decoupled: no match possible between answer table and respondents table, therefore technically completely anonymous
jelo

jelo

2022-08-27 14:58

partner   ~71539

Take one step back.
What is the difference you want to communicate?
In the mode you called "semi anonymous" or "De-coupled research" a criminal survey developer/conductor can design the survey in a way, that the answers can be matched to the participants list.

To whom do you want to communicate that difference?
To the criminal survey developer/conductor?
Or the the survey respondents?

If you want to communicate that to respondents, do you want to enforce a infobox in the survey? A infobox which cannot be removed via themes?
If not, the criminal survey developer/conductor can just remove that infobox.

The software cannot ensure anonymity. Many times respondents breaks it (e.g. enter personal data in text fields of surveys).
You got a point that calling it "anonymous mode" is misleading.
It's token is part of the answerset or token is not part of the answerset.
To communicate this difference is hard enough.

What LimeSurvey is missing, are variables, which are not saved/removed in the response set, after hitting submit.
But that would be part of an feature request.

For the topic of this bugticket a setting "Remove participants token/panel information and IP address from responses" would be a start.

Issue History

Date Modified Username Field Change
2022-07-14 10:35 Joffm New Issue
2022-07-14 10:35 Joffm File Added: a8.PNG
2022-07-14 10:35 Joffm File Added: a7.PNG
2022-07-14 10:35 Joffm File Added: a6.PNG
2022-07-14 10:35 Joffm File Added: limesurvey_survey_214392.lss
2022-07-14 10:59 Joffm Note Added: 70928
2022-07-14 10:59 Joffm Bug heat 0 => 2
2022-07-14 16:33 holch Note Added: 70939
2022-07-14 16:33 holch Bug heat 2 => 4
2022-07-14 16:50 gabrieljenik Note Added: 70940
2022-07-14 16:50 gabrieljenik Bug heat 4 => 6
2022-07-14 16:51 gabrieljenik Assigned To => gabrieljenik
2022-07-14 16:51 gabrieljenik Status new => feedback
2022-07-14 16:51 gabrieljenik Note Added: 70941
2022-07-14 18:14 holch Note Added: 70945
2022-07-14 18:20 gabrieljenik Note Added: 70946
2022-07-14 18:20 gabrieljenik Assigned To gabrieljenik => c_schmitz
2022-07-14 18:56 holch Note Added: 70947
2022-07-14 20:02 c_schmitz Note Added: 70949
2022-07-14 20:02 c_schmitz Bug heat 6 => 8
2022-07-14 21:01 holch Note Added: 70950
2022-07-14 23:29 jelo Note Added: 70953
2022-07-14 23:29 jelo Bug heat 8 => 10
2022-07-14 23:47 c_schmitz Note Added: 70954
2022-07-15 12:32 Mazi Note Added: 70956
2022-07-15 12:32 Mazi Bug heat 10 => 12
2022-07-15 12:33 Mazi Note Edited: 70956
2022-07-15 12:33 Mazi Note Edited: 70956
2022-07-15 13:24 c_schmitz Status feedback => resolved
2022-07-15 13:24 c_schmitz Resolution open => no change required
2022-07-15 16:31 holch Note Added: 70965
2022-07-15 17:23 jelo Note Added: 70967
2022-07-15 17:36 holch Note Added: 70970
2022-07-16 14:22 Mazi Note Added: 70979
2022-07-18 10:22 jelo Note Added: 70986
2022-07-20 09:06 DenisChenu Note Added: 71039
2022-07-20 09:06 DenisChenu Bug heat 12 => 14
2022-07-20 09:07 DenisChenu Status resolved => feedback
2022-07-20 09:07 DenisChenu Resolution no change required => reopened
2022-08-12 11:20 tammo Note Added: 71430
2022-08-12 11:20 tammo Bug heat 14 => 16
2022-08-27 14:58 jelo Note Added: 71539