Tipafriend and Anonimus user

Author Message

Martynas Bilevičius

Sunday 21 October 2007 11:15:00 am

Hi, i want tu use this modul in site, but only register users can send mail to friens using this tipafriend function, can everyone use on site use this function and send mail to friends. I creat link to tipa friend for all users but wthen click on it system want that i login to page. Way a cant use it mauby Roles anr policies bloc it ?

Diego Barcia

Sunday 21 October 2007 12:15:29 pm

Hi,

I think it's better to allow the tipafriend functionality only for registered users. I had this enabled on a 3.8.x instance, and had to remove it because of spammers. Spammers can use this feature to send unwanted mail without you even knowing it.

See this issue: http://issues.ez.no/8851

I think you can enable/disable this function by means of yout site.ini settting for your siteacces, under [SiteAccessRules]

As for 3.8.x series this function was enabled by default, but perhaps today is the opposite. You would have to change the default settings for this.

The disable setting I did use was
[SiteAccessRules]
Rules[]=access;disable
Rules[]=module;content/tipafriend

I think there is a "cpatcha" extension (replicate a string generated by an image) to allow anonymous users send the page URL to other mail addresses. For this see
http://ez.no/developer/forum/general/how_avoid_tip_a_friend_abuse

Martynas Bilevičius

Sunday 21 October 2007 12:39:23 pm

Thanks, i also fink about spamers so i try to use cpatcha to solve spam problem.

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.