- Posts: 7
- Thank you received: 0
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
Email field in invitation should be locked
- ahmadaub
- Topic Author
- Offline
- New Member
Less
More
9 years 5 months ago #114410
by ahmadaub
Email field in invitation should be locked was created by ahmadaub
The users can change the Email field in the invitation email.
So they can use Limesurvey to send anyone an email using any other email (friend@email.com) that they don't own, and the recipient will see an email from a "friend" email.
Anyone faced this problem?
Any solution?
So they can use Limesurvey to send anyone an email using any other email (friend@email.com) that they don't own, and the recipient will see an email from a "friend" email.
Anyone faced this problem?
Any solution?
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13647
- Thank you received: 2491
9 years 5 months ago #114412
by DenisChenu
Because other user can't change email in token table.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Email field in invitation should be locked
The admin user ?ahmadaub wrote: The users can change the Email field in the invitation email.
Because other user can't change email in token table.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- ahmadaub
- Topic Author
- Offline
- New Member
Less
More
- Posts: 7
- Thank you received: 0
9 years 5 months ago - 9 years 5 months ago #114444
by ahmadaub
Replied by ahmadaub on topic Email field in invitation should be locked
the superadmin of course can.
But also the administrators of the surveys.
We use limesurvey in the University, accounts are created for students to do survey for research, they administrators on their surveys. But they can change the "From" in the email invitation to "mimic" any other email address they want.
But also the administrators of the surveys.
We use limesurvey in the University, accounts are created for students to do survey for research, they administrators on their surveys. But they can change the "From" in the email invitation to "mimic" any other email address they want.
Last edit: 9 years 5 months ago by ahmadaub.
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13647
- Thank you received: 2491
9 years 5 months ago #114456
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Email field in invitation should be locked
PLease : put a Feature request. I don't think we block this but.
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- Mazi
- Offline
- Official LimeSurvey Partner
9 years 5 months ago #114460
by Mazi
Best regards/Beste Grüße,
Dr. Marcel Minke
Need Help? We offer professional Limesurvey support: survey-consulting.com
Contact: marcel.minke(at)survey-consulting.com
Replied by Mazi on topic Email field in invitation should be locked
With any other online tools sending emails you can enter mostly any "from:" address so faking the sender is not a Limesurvey issue but can also be done with most email clients.
Best regards/Beste Grüße,
Dr. Marcel Minke
Need Help? We offer professional Limesurvey support: survey-consulting.com
Contact: marcel.minke(at)survey-consulting.com
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- c_schmitz
- Offline
- LimeSurvey GmbH Employee
Less
More
- Posts: 302
- Thank you received: 84
9 years 5 months ago #114474
by c_schmitz
Best regards
Carsten Schmitz
LimeSurvey project leader
Replied by c_schmitz on topic Email field in invitation should be locked
Usually spoofed emails like this will be marked as spam by the receiving mail server. However I agree that this might be a problem if used under a valid domain in your scenario.
A feature request is still a good idea. For now you might want to fix the email sender to the address of the related administrator (so a code change).
A feature request is still a good idea. For now you might want to fix the email sender to the address of the related administrator (so a code change).
Best regards
Carsten Schmitz
LimeSurvey project leader
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13647
- Thank you received: 2491
9 years 5 months ago #114619
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Email field in invitation should be locked
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.