« I don't Like Forum Signatures
Concerning Email Option on Registration Screen
Automagically De-Nesting Quotes »

Arantor

  • As powerful as possible, as complex as necessary.
  • Posts: 14,278
Re: Concerning Email Option on Registration Screen
« Reply #15, on May 27th, 2013, 03:57 PM »
Yeah, I know exactly what you mean ;)

The codebases are quite a bit divergent, and getting further apart in both terms of behaviour as well as appearance - like the member options screen is gone, moved elsewhere and given a sane makeover.

But stuff like this largely hasn't changed and needs to be.
When we unite against a common enemy that attacks our ethos, it nurtures group solidarity. Trolls are sensational, yes, but we keep everyone honest. | Game Memorial

icari

  • Posts: 88
Re: Concerning Email Option on Registration Screen
« Reply #16, on May 27th, 2013, 04:02 PM »
Quote from Arantor on May 27th, 2013, 03:50 PM
Quote
The scenario is that a spammer sees a member allowing members to send them emails. They want to trick them into sending back an email, so they use the forum email system to send an email asking for help. I just tried it and I got an email with the other member's email as the sender. So if they reply via email - the original sender has their email address. This is all going on outside the PM system.
Really? Ah, well, another thing I didn't realise SMF did that I need to change. The list is surprisingly long at times.
yep that does happen, but it should state that it is not a message coming from the PM system, the user has to input a subject for the message, that should make it pretty clear that it does not come from the forum. also the person sending the email does NOT get the users email address they are sending to, just that use gets the user sending them an email address. so i dont see the real issue unless the person getting the message does not take care in who they reply to. also it is clear a warning on the email page that your email will be visible to those that you send the message to. also the email sent will come from the forum's email server which some email services may mark as spam as it is not coming from the same domain as the email address.

we cant protect our users from being dumb and stupid all the time.

godboko71

  • Fence accomplished!
  • Hello
  • Posts: 361
Thank you,
Boko
« I don't Like Forum Signatures
Automagically De-Nesting Quotes »