#2177 - Make auto-acknowledge emails optional

Identifier #2177
Issue type Feature request or suggestion
Title Make auto-acknowledge emails optional
Status Completed
Tags

Type: Security (custom)

Handling member Chris Graham
Addon core_configuration
Description The auto-emails (lang strings YOUR_MESSAGE_WAS_SENT_SUBJECT and YOUR_MESSAGE_WAS_SENT_BODY) are sent out when you post a contact request.

However, if you disable CAPTCHA for these forms, these emails can effectively be used as an open relay - as you can put in a fraudulent from address, and the system sends out an email to that address.
Steps to reproduce

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated