Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
At the root of theme, I noticed a file sendmail.php that sends emails. No authentication / no protection, that is, anyone (who knows) can be engaged in sending emails. This oversight or you lack the mail gateway?)))
Comments
Comment #1
the_g_bomb CreditAttribution: the_g_bomb commentedOversight. The original wordpress theme had that in there, I had meant to remove it and just use the contact form instead. My guess is that I forgot to remove it when I got the contact form styled up.
Comment #2
the_g_bomb CreditAttribution: the_g_bomb commentedFinally pushed the removal of this