Tipafriend and spam

Author Message

Anders F

Monday 19 January 2004 2:54:48 pm

Does the tipafriend funtionality share the same vulnerability to spam attacks as the form/process module?

See:
http://www.ez.no/developer/ez_publish_3/forum/developer/ez_publish_32_vulnerable_to_spam_attacks

Regards,
Anders

Bård Farstad

Monday 19 January 2004 11:55:35 pm

No, since you will only be able to set which address to send to ( and from ). You cannot alter the message it self. However you can send a tip to anyone, so in this sense you will be able to send spam.

The form/process module just forwards all HTTP POST variables to a given e-mail address, so this moule can be used to send spam. The form/process module is disabled by default, but is included as a feature which is compatible with 2.2 form processing.

--bård

Documentation: http://ez.no/doc

Anders F

Tuesday 20 January 2004 12:37:02 am

Thanks for clearing things up!

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 18 2025 15:14:52
Script start
Timing: Jan 18 2025 15:14:52
Module start 'layout'
Timing: Jan 18 2025 15:14:52
Module start 'content'
Timing: Jan 18 2025 15:14:53
Module end 'content'
Timing: Jan 18 2025 15:14:53
Script end

Main resources:

Total runtime0.9443 sec
Peak memory usage4,096.0000 KB
Database Queries57

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0056 587.8125152.6094
Module start 'layout' 0.00560.0026 740.421939.4141
Module start 'content' 0.00820.9347 779.8359531.0625
Module end 'content' 0.94290.0014 1,310.89848.1875
Script end 0.9443  1,319.0859 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00280.2946160.0002
Check MTime0.00120.1250160.0001
Mysql Total
Database connection0.00110.116310.0011
Mysqli_queries0.905595.8829570.0159
Looping result0.00050.0480550.0000
Template Total0.916797.120.4584
Template load0.00180.187120.0009
Template processing0.914996.884720.4575
Template load and register function0.00010.014110.0001
states
state_id_array0.00070.068910.0007
state_identifier_array0.00160.172920.0008
Override
Cache load0.00150.1553150.0001
Sytem overhead
Fetch class attribute can translate value0.00110.112720.0005
Fetch class attribute name0.00100.109640.0003
XML
Image XML parsing0.00060.065320.0003
class_abstraction
Instantiating content class attribute0.00000.001440.0000
General
dbfile0.00110.1133170.0001
String conversion0.00000.000940.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
3content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
5content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
2content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
1content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 13
 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs