+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: System Setup & Installation (/forum-32.html)
+--- Thread: Disable need for "confirmation" (ispcp 1.1.10) (/thread-14244.html)
Pages: 1 2
RE: Disable need for "confirmation" (ispcp 1.1.10) - Monotoko - 06-28-2011 07:55 AM
Personally, I think an option for it would be better, by all means leave it on by default but let us who don't need it as such switch it off... Maybe just disallow the major email hosts to be added? Eg hotmail.com, gmail.com etc
(06-27-2011 03:14 PM)kilburn Wrote:Quote:hmmm, ok, you're right for the local server. But from WWW it wouldn't work.
No, obviously not. However, in this example the attacking user would capture all the e-mails that other users of that server send to gmail.com. Bad enough to justify the confirmation procedure IMHO...
RE: Disable need for "confirmation" (ispcp 1.1.10) - Minganus - 07-25-2011 06:21 PM
Anyone was write this patch?
RE: Disable need for "confirmation" (ispcp 1.1.10) - Minganus - 09-13-2011 09:55 AM
Follow up,
Anyone was write this patch?
RE: Disable need for "confirmation" (ispcp 1.1.10) - kilburn - 09-13-2011 04:20 PM
Have you?