Use of this module to anonymize Webform submissions doesn't fully anonymize the data for logged in users. Users with suffecient privileges are easily able to identify the user that submited the form.

Anonymous data visible

It appears that this module is removing the identifying information from the submissions after webform has already collected it. Perhaps a better approach would be to prevent webform from knowing anyone was logged in on load?

CommentFileSizeAuthor
visible_with_webform_anonymous.png51.93 KBbenjaminarthurt

Comments

dwieeb’s picture

dwieeb commented

Webform Anonymous does not sanitize the data in the database. Otherwise, it would affect the behavior of webform. For example, you might put a requirement that users may only submit one submission, but if I anonymize the data in the database webform would not be able to enforce that.

So, I anonymize the results just before I show them. I cannot hook into those admin reports and if someone really wanted to they could get the IP and maybe username from server logs and the database logs.