Tipafriend and spam

Author Message

Anders F

Monday 19 January 2004 2:54:48 pm

Does the tipafriend funtionality share the same vulnerability to spam attacks as the form/process module?

See:
http://www.ez.no/developer/ez_publish_3/forum/developer/ez_publish_32_vulnerable_to_spam_attacks

Regards,
Anders

Bård Farstad

Monday 19 January 2004 11:55:35 pm

No, since you will only be able to set which address to send to ( and from ). You cannot alter the message it self. However you can send a tip to anyone, so in this sense you will be able to send spam.

The form/process module just forwards all HTTP POST variables to a given e-mail address, so this moule can be used to send spam. The form/process module is disabled by default, but is included as a feature which is compatible with 2.2 form processing.

--bård

Documentation: http://ez.no/doc

Anders F

Tuesday 20 January 2004 12:37:02 am

Thanks for clearing things up!

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.