Hello,

today I received an email to my user account who gets messages about user registration

I am using drupal 4,7 logintoboggan, captcha, text image modules

there is no trace of the user having actually registered on the site

but the email I received was simply one of these emails about buying oil stocks or the like

anybody got any idea how it was done and how to prevent it in the future.

If anyone needs any more info please let me know

tkgafs

Comments

jadwigo’s picture

you're a bit too vague about what exactly happened..

you got a spam email, that happens to everyone
If you got an email from the registration system the user should also be registered...
If there is no user registration and the email does not look like a user registration notificaiton from drupal, then the spam is most likely using a faked header with a fake sender and the emailadress you normally get your registrations as a recipient. This can have many causes, but usually someone who registered on your site has a spy/malware infected PC - which in turn sent the spam email.