Go to:
Discussion
Online Doc
File
Poll
Event
Picture
Jan L. Carmichael (staff)'s picture

We need some sort of workable solution for integrating social media on the Ala.org website.

 

We’re no longer allowed to embed widgets; the

Stephanie Kuenn (staff)'s picture

I'd love a solution, too. I'd add Google embeds (e.g. Google maps), fundraising integration (we use a widget from Causes.com for fundraising), and SurveyMonkey surveys.

Stephanie Kuenn, YALSA Web Services Manager

skuenn@ala.org

www.ala.org/yalsa

Steven Hofmann (staff)'s picture

We recently found a very cost-effective solution for providing closed-captioning of embedded videos. However, the solution requires that

Steven L. Hofmann
Manager, Web Communications
Public Library Association
312-280-5047 / 800-545-2433 x5047

www.pla.org

Valerie Hawkins (staff)'s picture

Now I have to hope I never have to edit a page that came over to Drupal with a widget already embedded, because if I do, when I go to save the page, the system will give me the following error --

Request denied by WatchGuard Firewall
Reason: IPS detected for "VULN Cross-Site Scripting -7/Web Attack".

And won't let the page publish until and unless the widget script is removed??

Was the plan that we would only have social media widgets in the right-hand pods and never on any of our web pages themselves?

 

Valerie Hawkins
Library Reference Specialist
ALA Library
American Library Association
50 East Huron Street
Chicago, IL 60611-2795
Phone: (800) 545-2433, ext. 2154

Steven Hofmann (staff)'s picture

...the restrictions are different on the unit homepages, since these homepages include the tabbed news/blog/Twitter/ALA Connect feeds?

Steven L. Hofmann
Manager, Web Communications
Public Library Association
312-280-5047 / 800-545-2433 x5047

www.pla.org

Valerie Hawkins (staff)'s picture

The best that could be installed at THE home page at ALA.org was a broken version of the Twitter widget, which updated every 20 minutes in reaction to a timed maintenance check. That's why it's over to the side in a pod -- and even that took some doing! -- instead of underneath the news tabs like before.

Edited to add:  And I ran into the Watchguard error in the first place while editing a basic page.

Valerie Hawkins
Library Reference Specialist
ALA Library
American Library Association
50 East Huron Street
Chicago, IL 60611-2795
Phone: (800) 545-2433, ext. 2154

Rebecca Gerber (staff)'s picture

This is going to be a big deal for us - part of what ALA has been instructed to do with the website (overall) is to embrace Social Media. How can we do this if we can't use widgets? What do other sites do?  Is this a case of ITTS being too diligent about the risks?

I've run into problems just with content (not even widgets) causing SQL injection errors. This is based on specific terms being used (i.e., exec).

Erik Cameron (staff)'s picture

No, I think ITTS is being reasonable disallowing script/iframe tags.  Additional functionality like that should really be handled by modules, rather than on an ad hoc basis.  (Though Val, the problems with migrated widgets you mentioned is definitely something to look at, that probably shouldn't be happening.)  Even in the case where some arbitrary/external JavaScript is needed, it should be included via the Drupal API rather than in script tags.  Our best strategy would be to try to figure out what functionality we need and find the appropriate (read: secured, maintained) modules for ITTS to install.

Rebecca---are you running into those injection errors just trying to add text in the editor?

--
Erik Cameron
Program Officer, Online Applications
Public Programs Office // American Library Association
312.280.3272 // ecameron@ala.org

Steven Hofmann (staff)'s picture

How about ITTS not disallowing script/iframe tags until the appropriate modules are in place? Unless there's an iminent security threat of course.

Steven L. Hofmann
Manager, Web Communications
Public Library Association
312-280-5047 / 800-545-2433 x5047

www.pla.org

Tracey Hughes's picture

MAGIRT - a small round table - is working hard to get our online presence synched over the various outlets that we have.  We use LibGuides, LinkedIn, Facebook, Twitter, ALA Connect and our website - and we don't want to have content that is outdated in one or to have our members have to post and repost and repost and repost.  We'd like to embed some of our LibGuides boxes onto the ALA website so that our webmaster doesn't have to update rosters or addresses or titles and our committees can take ownership of their own information in a way that makes sense.

Tracey Hughes, Librarian, Colorado Mountain College

Stephanie Hill's picture

Yes, I too am interested in finding a way in which I do not have to post information in multiple sites -- an RSS Feed that allows a post on FB or Twitter to also appear on our website would be great w/o having to place information on different venues.

               Stephanie A. Hill

                 ADJUNCT & REFERENCE LIBRARIAN

Jenny Levine (staff)'s picture

I've been trying to schedule a brown bag lunch for ALA staff on this topic to produce a handout I could share generally, but I just haven't had time so far.

Until I do, check out http://ifttt.com, and to a lesser extent http://zapier.com, for help publishing once, posting everywhere.

HTH,
Jenny

 

Jenny Levine (staff)'s picture

To clarify, If This Then That (http://ifttt.com) will let you plug in an RSS feed and automatically post a notice to Facebook, Twitter, LinkedIn, etc. every time you publish a blog post (or anything else with an RSS feed). You can essentially connect any two services based on a trigger action (I have it automatically post my Flickr pictures to Facebook and Twitter).

HTH,
Jenny

David Vess's picture

This is likely old news to most of you, but just in case . . .  hootsuite will also post things across different services.  We use it on the GLBTRT website.  Anytime a post is made on our blogs, a message about the post goes to our Facebook page and twitter account.  You can also schedule messages to go out on select services or all of them (facebook, twitter, and others) from the hootsuite dashboard.  You can also manage your conversations in these services from the hootsuite dashboard.  It does have a monthly fee.  http://hootsuite.com/