Email validation - Invitation Manager

[eleonard]

Hello,

We are using Checkbox Survey Server 4.6. We are testing the Invitation Manager function and are discovered that there is no security validation for the email address we put in the "From" field.

This is a problem, because nothing prevents someone from sending an invitation in the name of the president of the company. We have rules within our Outlook/Exchange system that prevent someone from sending messages other than in their own name, but these don't seem to apply to Checkbox.

Does anyone know if it's possible to use the Outlook/Exchange validation with Checkbox? And if not, what are our options to make this more secure?

Thanks,

Eve Leonard

[ncushing]

Eve,

Is Checkbox configured to send email via your Exchange server? If so, it may be using a privileged account that has the ability to send email on behalf of others. If it is not using the Exchange server, then any protections enabled by that server would be bypassed.

[James Alex]

Simple way to validate an email address!
You still have to validate on the server side!
This will only alert the user of invalid input.


_______________________
gaming notebooks|gaming laptops|Sager NP7280