Welcome to Geeklog, Anonymous Friday, April 04 2025 @ 03:12 pm EDT

Geeklog Forums

Email security problem

Post New Reply

Author:

Mood:

Code

Font Color Font Size Close Tags

Forum BBCode Help

BBCode	Effect
[b]bolded text[/b]	bolded text
[i]italicized text[/i]	italicized text
[u]underlined text[/u]	underlined text
[s]strikethrough text[/s]	strikethrough text
[img]http://www.site.com/forum/images/forum.png[/img] OR [img h=65 w=50]http://www.site.com/forum/images/forum.png[/img]
[url=https://www.geeklog.net]Geeklog[/url]	Geeklog
[quote]quoted text[/quote]	To quote: quoted text
[size=15]Your Text[/size] "12" is usually standard on message boards. Usually measured in pixels (px).	Your Text
[color=red]Red Text[/color] OR [color=#FF0000]Red Text[/color] Can use many different color names or hex codes.	Red Text
[list] []List item 1 []List item 2 [/list] OR [list=1] []List item 1 []List item 2 [/list]	List item 1 List item 2 List item 1 List item 2
[code]monospaced text[/code]	monospaced text
[code=XYX]formatted code[/code] Where XYZ can be any of the following: c css html4strict java javascript jquery perl php plain python SQL and many more...	formatted code
To enter a backslash (\) in your post, use \\\\	\

Subject

[QUOTE][u]Quote by: Mikez[/u][p]I am getting spam.
And come to find out, other people on my site is also.
I started playing with it.
And the IP is from my server.

Can you all do something. (this is long but well eliminate all spam from the GL email system)
1. Put a place in the Config file for a dummy/auto reply email.
2. Put in the Config file, a place to change the name of an email.
  2A. Example. "E-mail from mysite"
3. With users not logged in. they can still put there name and email.
   But how it is sent to the user well be deferent.
   3A.The email Addy and name is the Dummy Email and the name is 
      E-mail from my site
   3B.The Subject and body can be changed by the person emailing.
   3c. Also it well get the IP of the user sending the E-mail.
   3d. Thin make the email sent to use looks something like this.
[code]From name: E-mail from my site

From E-mail: Dummy Email

Subject: what ever they put.

Body of email: This email was sent from (name of site) By someone not logged in. They submitted the name (what they put in the from box) And they put a reply Email: (There Email addy they submitted)
There IP is: (Put the IP of the sender here). If this is SPAM, contact a Administrator from (Site name here) There Website is at (The URL not in HTML) Here is there message to you: (Body text)
[/code]

4. For people Logged in.
 4a. It wont ask who it's from or there email. 
 4b.Subject and body box the same.
 4c.the person getting the email well see.
[code]From name: E-mail from my site

From E-mail: Dummy Email

Subject: what ever they put.

Body of email: This email was sent from (name of site) By someone logged in with the user name:(put in the user name). 
Theree Contact informashin is (Put the url to there profile)
There IP is: (Put the submitters IP addy here)
If this is SPAM, contact a Administrate from (Site name here) There Website is at (The URL not in HTML) Here is there message to you:

(Body text)

[/code]

This way it well stop spam.
And we can configure our email at home to only take email from the name and Email of the site.
That well be GREAT for Admins with high traffic sites.
To me, this is a huge security hole in GL.

It's real easy and easy to do it massively with free stuff to spam GL.
let me show you.

Download a free browser called Slim Browser. (mind you I use this)
This browser can open many predefined pages and has a nifty auto filler belt in.
Not hard at all to tie together.

And they can even make it happen when they open the browser so they can do it with 1 click.
With a day of taking the time of just verifying
addyes like so.
http://www.your site.com/profiles.php?uid=2
http://www.your site.com/profiles.php?uid=3
http://www.your site.com/profiles.php?uid=4
and putting them in the browser and pasting in the auto filler.
from:sexy
Body:come to my site cuz the site your going to allows spamers like me!

Also in the Config.
Put a place to turn off emails from people not logged for Admins.
And a separate on for users.
That way, even if we may be forced still do deal with it for problems. Like someone can't log in.
The other users don't.
I know thay can in there prefs.
But when your getting spam site wide like me.
I need to have a way to stop it for them.
And keep it open for me, the admin.

please, this well help a lot of problems for me.  [/p][/QUOTE]

Options:

HTML Mode

Geeklog Forums

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks