----- Original Message ----- 
From: "Andrey Hristov" <[EMAIL PROTECTED]>
To: "Paul G" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, August 02, 2004 9:53 AM
Subject: Re: [PHP-DEV] list abuse


--- snip ---

> Sure it does it intentionally. I have used to check the site without the
> provided link and it looked
> like some pr0n site.
>
> Here is the source of the last message. Usually they "come" from addresses
like
> [EMAIL PROTECTED],
> [EMAIL PROTECTED] even  [EMAIL PROTECTED] :)

this is really simple, as i've stated in a previous mail. script parses
message, takes the address listed first in the 'to' and uses it as 'from'
for the confirmation mail. this works perfectly fine when it's a mail from
person A to cluetard B, but delivers funky results (which we are seeing)
when used on an account that receives mailing list traffic. this is
understandable, since the author obviously never intended for it to be used
that way.

nekkidness or no nekkidness doesn't make a difference in this case (the
website seems to be a service for adult gallery webmasters) - if they wanted
to harvest e-mail addresses, they could just harvest from the archives. this
is clearly a case of misconfiguration (ie confirmation script enabled on an
account receiving maillist traffic).

regardless, it would be nice to get rid of it. can someone on the admin side
send an ID'ed test to subscribers to see where this is coming from (or is
this considered a minor nuisance not worth bothering with)?

paul

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to