Forum Discussion

Qrew Member

4 years ago

Solved

API_AddRecord Alternative URL Redirect

Is it possible to add a redirect to an alternative API URL? So instead of it showing the response xml page you can redirect to another URL. https://target_domain/db/target_dbid?a=API_AddRecord&_fn...

NathanHawe
4 years ago
I don't recall if I've ever tested it myself, but the redirect may be as simple as adding another hidden text input to your form with name "rdr":

<input type="text" name="rdr" value="https://quickbase.com" readonly hidden />

A note about the usertoken in your page: If this is a code page hosted on Quick Base, you don't necessarily need to pass the usertoken since the API will authenticate using the browser's session. Of course, that assumes the user has sufficient access to create records in the table being posted to. Regardless, anyone who can access that page can read that usertoken and then use it to make their own API calls against your application. I'd be very careful about using usertokens in this manner unless absolutely necessary and you know you have rock solid access control to that page.

------------------------------
Nathan Hawe
------------------------------

MarkShnier__You

Qrew Champion

Sorry, I'm not understanding the question. What does the initial URL look like and where do you want to redirect to?

You can redirect with this Syntax

initial URL here
& "&rdr=" & URLEncode( .. the next URL here..)

------------------------------
Mark Shnier (YQC)
Quick Base Solution Provider
Your Quick Base Coach
http://QuickBaseCoach.com
mark.shnier@gmail.com
------------------------------

Qrew Member

4 years ago

The initial URL is setup using the URL Alternative referenced in the API_AddRecord Guide

https://target_domain/db/target_dbid?a=API_AddRecord&_fnm_second_year=1776&_fid_8=changed&ticket=auth_ticket&apptoken=app_token&rdr=quickbase.com

I want to use the URL alternative on an html form to pass data to my quickbase table and then redirect the user back to the form that the data was sent but instead the users sees the xml response page.

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<qdbapi>
<action>API_AddRecord</action>
<errcode>0</errcode>
<errtext>No error</errtext>
<rid>7</rid>
<update_id>1607034415505</update_id>
</qdbapi>

------------------------------
C G
------------------------------

MarkShnier__You
Qrew Champion
4 years ago
I would have to see your actual code syntax to see why it's not redirecting and to see if you followed he syntax I suggested.

------------------------------
Mark Shnier (YQC)
Quick Base Solution Provider
Your Quick Base Coach
http://QuickBaseCoach.com
mark.shnier@gmail.com
------------------------------
NathanHawe
Qrew Cadet
4 years ago
Your example of redirecting to quickbase.com should work (if you changed it to https://quickbase.com); however, if you're trying to return back to a code page then the special characters in the URL probably need to be escaped. For example the following rdr is not parsable:

target_domain/db/target_dbid?a=API_AddRecord...&rdr=https://target_domain/db/target_dbid?a=dbpage&pagename=test.html

But a properly escaped rdr is:

target_domain/db/target_dbid?a=API_AddRecord...&rdr=https%3A//target_domain/db/target_dbid%3a%3Ddbpage%26pagename=test.html

Mark Schnier pointed out that you can escape that URL in a formula field by using URLEncode(). If you're making your own form on a code page you can use the JavaScript function escape() to do the same thing. For example escape(window.location) will escape the current URL into a new string.

------------------------------
Nathan Hawe
------------------------------
- GBab
  Qrew Member
  4 years ago
  @Mark Shnier (YQC) & @Nathan Hawe Here is the html code.
  <!DOCTYPE html>
  <html>
  <head>
  <title>Title</title>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  
  <script>
  function getParams() {
  var idx = document.URL.indexOf('?');
  var params = new Array();
  if (idx != -1) {
  var pairs = document.URL.substring(idx+1, document.URL.length).split('&');
  for (var i=0; i<pairs.length; i++) {
  nameVal = pairs.split('=');
  params[nameVal[0]] = nameVal[1];
  }
  }
  return params;
  }
  params = getParams();
  </script>
  
  </head>
  <body>
  <h1>Title</h1>
  <form action="https://company.quickbase.com/db/XXXXXXX" >
  <fieldset>
  <legend>Call</legend>
  <ul>
  <li>
  <input type="text" name="a" id="cmd" value="API_AddRecord" readonly hidden />
  <label for="Number">Number:</label>
  <input type="text" name="_fid_6" id="Number" style="width:12ch;"/>
  </li>
  <li>
  <label for="ContactID">ContactID:</label>
  <input type="text" name="_fid_7" id="ContactID" hidden readonly" style="width:34ch;"/>
  <input type="text" name="_fid_7_hidden" id="ContactID2" disabled readonly style="width:34ch;"/>
  </li>
  
  <li>
  <label for="CallingAbout">Calling For:</label>
  <select id="CallingAbout" name="_fid_8">
  <option value="value1">value1</option>
  <option value="value2">value2</option>
  </select>
  </li>
  <li>
  <label for="Case Creation">Case Creation:</label>
  <select id="Case Creation" name="_fid_9">
  <option value="Yes">Yes</option>
  <option value="No">No</option>
  </select>
  </li>
  <li>
  <label for="Comments">Comments:</label></br>
  <textarea name="_fid_10" id="Comments" rows="5" cols="30" placeholder="Please enter your notes about case"></textarea>
  <input type="text" name="apptoken" id="apptoken" value="xxxxxxxxxxxxxxxxx" readonly hidden />
  <input type="text" name="usertoken" id="usertoken" value="xxxxxxxxxxxxxxxxx" readonly hidden />
  </li>
  </ul>
  <input type="submit" value="Submit" style="color:black; font-size: medium;">
  </fieldset>
  </form>
  
  <script>
  
  var para1=document.getElementById('Number');
  var para2h=document.getElementById('ContactID');
  var para2=document.getElementById('ContactID2');
  var para3=document.getElementById('CallingAbout');
  
  para1.value = unescape(params["var1"]);
  para2.value = unescape(params["var2"]);
  para2h.value = para2.value;
  para3.value = unescape(params["var3"]);
  
  </script>
  </body>
  </html>
  
  ------------------------------
  C G
  ------------------------------
  - NathanHawe
    Qrew Cadet
    4 years ago
    I don't recall if I've ever tested it myself, but the redirect may be as simple as adding another hidden text input to your form with name "rdr":
    
    <input type="text" name="rdr" value="https://quickbase.com" readonly hidden />
    
    A note about the usertoken in your page: If this is a code page hosted on Quick Base, you don't necessarily need to pass the usertoken since the API will authenticate using the browser's session. Of course, that assumes the user has sufficient access to create records in the table being posted to. Regardless, anyone who can access that page can read that usertoken and then use it to make their own API calls against your application. I'd be very careful about using usertokens in this manner unless absolutely necessary and you know you have rock solid access control to that page.
    
    ------------------------------
    Nathan Hawe
    ------------------------------