Closed (won't fix)
Project:
Contact Storage
Version:
8.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Reporter:
Created:
1 May 2016 at 23:55 UTC
Updated:
13 Jul 2021 at 03:19 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
larowlanUpdates
Comment #3
larowlanComment #4
jibranDo we need an upgrade path for this?
Comment #5
benjy commentedRTBC for me, @jibran, wouldn't it be OK since we have a default value on the call? Although maybe an upgrade path is more reliable...
Comment #6
berdirDoesn't this restriction exist for security reasons? As anonymous user, you can otherwise send out spam to arbitrary e-mail addresses through that form?
Comment #7
jibranWell it is OK but imo every module should clean up after itself and set defaults on module uninstall and install. I agree the feature is complete and this will be just icing on the cake.
Comment #8
jibran#7 is in Re: #5
Comment #9
benjy commented@Berdir, sure but the comment on the setting tells you that and it isn't the default, an administrator would have to enable it?
Comment #10
larowlan@Berdir, yes but it would be limited by flood settings too
A client requested this feature - maybe we should add a note 'Adding an additional spam prevention measure is recommended' to the comment?
Comment #11
andypostWe have protection to hide "copy" field in
\Drupal\contact\MessageForm::form()Comment #12
andypostoh... field description should be removed
Comment #13
andypostI mean that comment
this nothing about anonymous users
Comment #14
andypostsuppose that
Comment #15
larowlanWell if the default is to send a copy, even anonymous users get sent a copy.
So I think we should have a comment and expand it to mention a second-level spam prevention layer.
Thoughts?
Comment #16
andypostI'd better add a some check to make sure that anonymous users will never get a copy message
Because you can get you site blacklisted...
Comment #17
larowlanWell this issue arose out of a client requirement to always send anonymous users a copy.
Yes I advised of the risks.
Maybe we split the checkbox in two.
'Default send a copy'
'Default anonymous send a copy'
With the second checkbox having a big warning about a second-level spam protection control etc?
Comment #18
larowlanRe-rolling 1 for a client project
Comment #21
welly commentedRerolled patch
Comment #22
welly commentedComment #24
welly commentedComment #26
welly commentedFixed paths in patch
Comment #27
welly commentedComment #28
welly commentedLet's try again.. ಠ_ಠ
Comment #30
larowlan