Quantcast
Channel: phpBB.com
Viewing all articles
Browse latest Browse all 1730

[3.3.x] Support Forum • Re: The Boards email form sends email with a Reply-To which reveals the forum user's registered email address.

$
0
0
Among others there is sender, from and optional reply-to field in email. From and sender should be the same and the domain should match DNS records , SPF etc. for the IP of server sending it. Otherwise it might end up getting labeled spam. Reply-to is optional for cases like the one we have here where forum software is sending an email on behalf of someone. As already pointed out it wouldn't make any sense to not use the users email in reply-to.

When "Users send email via board:" board is enabled this has the benefit of not exposing the recipients email to scrapers or even the user sending it. However unless you are tightly controlling user registration to known people IMO this should be disabled because you are opening yourself to be a relay for spam when it's enabled. When disabled email links revert to standard HTML email link opening the users email client instead.

"Hide email addresses:" set to yes will remove those links presumably only when "Users send email via board:" is disabled as it's only time it would be applicable. When it's set to no this can also be set by user, I believe it defaults to hidden. Personally just leave it to no and let the user decide.

The reply-to being filled with the users email address sending it is really the only way to do it for reasons already stated. Perhaps there should be warning it will expose your email to recipient if you use this feature but I would not see any reason to change the behavior.

Statistics: Posted by thecoalman — Thu Jul 18, 2024 10:23 am



Viewing all articles
Browse latest Browse all 1730

Trending Articles