search

VandyApps / vandyvans-ios

Vandy Vans Project for iOS
8 stars 3 forks source link

Anyone Can Send Email from Anyone #26

Closed sethfri closed 9 years ago

sethfri commented 10 years ago

While the contact form presents a nice focused view that gets only the information necessary from the user, there is a pretty large security flaw: A user can put in anyone else's email address, and it will appear to have been sent from that other person.

One way of trying to get around this would be to somehow get the user's email address, possibly from the "Me" contact using the AddressBook framework. However, if that doesn't work, the app will need to switch to using an MFMailComposeViewController.

sethfri commented 9 years ago

There's no harm in presenting the MFMailComposeViewController. Doing that