source: main/waeup.kofa/trunk/docs/source/userdocs/applicants/browser.rst @ 13099

.. _applicant_registration:

Registration
============

The `ApplicantRegistrationPage` allows two register in create or in
update mode, depending on the
:ref:`mode of its context<application_mode>`, i.e. the applicants
container.

In create mode, `firstname`, `middlename`, `lastname`, `email` and
`phone` are requested. A new record is being created.

In update mode, only `reg_number`, `lastname` and `email` have to be
entered. Kofa searches for an applicant record with matching
registration number and lowercased lastname. If the search does not
yield a result, the flash message: 'No application record found' is
returned. The anonymous user will not know, if the registration
number does not exist, or the provided lastname does not match. A
third ``if`` statement checks whether the password has already been
set and used, i.e. the the application has already been started. If
so, the anonymous user is being requested to proceed to the login
page.

In both registration modes a randomly generated password is set and
the email address is saved. An email with login credentials is sent
to this address. Finally, the browser is redirected to a landing
page. Depending on the portals configuration, the landing page tells
the user that an email has been send to her/his mailbox, or even
discloses additionally the login credentials. The disclosure of
credentials has two substantial drawbacks: (1) The login credentials
can be misused by web crawlers for bulk account creation, which may
cause the system to crash. (2) The email address provided by the
user is not being verified and there is no guarantee that the
address belongs to the user or that a mailbox with such an address
exists. Therefore, we strongly recommend to only send credentials to
email addresses.


.. _applicant_payment_tickets:

Payment
=======



.. _creating_students:

Creating Student Records
========================