Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Email field in invitation should be locked

  • ahmadaub
  • ahmadaub's Avatar Topic Author
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago #114410 by ahmadaub
The users can change the Email field in the invitation email.
So they can use Limesurvey to send anyone an email using any other email (friend@email.com) that they don't own, and the recipient will see an email from a "friend" email.
Anyone faced this problem?
Any solution?
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
9 years 4 months ago #114412 by DenisChenu
Replied by DenisChenu on topic Email field in invitation should be locked

ahmadaub wrote: The users can change the Email field in the invitation email.

The admin user ?

Because other user can't change email in token table.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
  • ahmadaub
  • ahmadaub's Avatar Topic Author
  • Offline
  • New Member
  • New Member
More
9 years 4 months ago - 9 years 4 months ago #114444 by ahmadaub
Replied by ahmadaub on topic Email field in invitation should be locked
the superadmin of course can.
But also the administrators of the surveys.

We use limesurvey in the University, accounts are created for students to do survey for research, they administrators on their surveys. But they can change the "From" in the email invitation to "mimic" any other email address they want.
Last edit: 9 years 4 months ago by ahmadaub.
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
9 years 4 months ago #114456 by DenisChenu
Replied by DenisChenu on topic Email field in invitation should be locked
PLease : put a Feature request. I don't think we block this but.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
  • Mazi
  • Mazi's Avatar
  • Offline
  • Official LimeSurvey Partner
  • Official LimeSurvey Partner
More
9 years 4 months ago #114460 by Mazi
With any other online tools sending emails you can enter mostly any "from:" address so faking the sender is not a Limesurvey issue but can also be done with most email clients.

Best regards/Beste Grüße,
Dr. Marcel Minke
Need Help? We offer professional Limesurvey support: survey-consulting.com
Contact: marcel.minke(at)survey-consulting.com
The following user(s) said Thank You: DenisChenu
The topic has been locked.
  • c_schmitz
  • c_schmitz's Avatar
  • Offline
  • LimeSurvey GmbH Employee
  • LimeSurvey GmbH Employee
More
9 years 4 months ago #114474 by c_schmitz
Replied by c_schmitz on topic Email field in invitation should be locked
Usually spoofed emails like this will be marked as spam by the receiving mail server. However I agree that this might be a problem if used under a valid domain in your scenario.
A feature request is still a good idea. For now you might want to fix the email sender to the address of the related administrator (so a code change).

Best regards

Carsten Schmitz
LimeSurvey project leader
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
9 years 4 months ago #114619 by DenisChenu
Replied by DenisChenu on topic Email field in invitation should be locked
Hi,
Plugin event : beforeTokenEmail can easily be used for this, i think.

Denis

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.

Lime-years ahead

Online-surveys for every purse and purpose