Email field in invitation should be locked

More
3 years 4 weeks ago #114410 by ahmadaub
ahmadaub created the topic: Email field in invitation should be locked
The users can change the Email field in the invitation email.
So they can use Limesurvey to send anyone an email using any other email (This email address is being protected from spambots. You need JavaScript enabled to view it.) that they don't own, and the recipient will see an email from a "friend" email.
Anyone faced this problem?
Any solution?

Please Log in to join the conversation.

More
3 years 4 weeks ago #114412 by DenisChenu
DenisChenu replied the topic: Email field in invitation should be locked

ahmadaub wrote: The users can change the Email field in the invitation email.

The admin user ?

Because other user can't change email in token table.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in to join the conversation.

More
3 years 3 weeks ago - 3 years 3 weeks ago #114444 by ahmadaub
ahmadaub replied the topic: Email field in invitation should be locked
the superadmin of course can.
But also the administrators of the surveys.

We use limesurvey in the University, accounts are created for students to do survey for research, they administrators on their surveys. But they can change the "From" in the email invitation to "mimic" any other email address they want.
Last Edit: 3 years 3 weeks ago by ahmadaub.

Please Log in to join the conversation.

More
3 years 3 weeks ago #114456 by DenisChenu
DenisChenu replied the topic: Email field in invitation should be locked
PLease : put a feature request. I don't think we block this but.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in to join the conversation.

More
3 years 3 weeks ago #114460 by Mazi
Mazi replied the topic: Email field in invitation should be locked
With any other online tools sending emails you can enter mostly any "from:" address so faking the sender is not a Limesurvey issue but can also be done with most email clients.


Best regards/Beste Grüße,
Dr. Marcel Minke
(Limesurvey Head of Support)
Need Help? We offer professional Limesurvey support
Contact: marcel.minke(at)survey-consulting.com'"
The following user(s) said Thank You: DenisChenu

Please Log in to join the conversation.

More
3 years 3 weeks ago #114474 by c_schmitz
c_schmitz replied the topic: Email field in invitation should be locked
Usually spoofed emails like this will be marked as spam by the receiving mail server. However I agree that this might be a problem if used under a valid domain in your scenario.
A feature request is still a good idea. For now you might want to fix the email sender to the address of the related administrator (so a code change).

Best regards

Carsten Schmitz
LimeSurvey project leader

Please Log in to join the conversation.

More
3 years 3 weeks ago #114619 by DenisChenu
DenisChenu replied the topic: Email field in invitation should be locked
Hi,
Plugin event : beforeTokenEmail can easily be used for this, i think.

Denis

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!