andrewscaya / mod_simpleemailform

Joomla module: mod_simpleemailform
http://joomla.unlikelysource.org/
GNU General Public License v2.0
3 stars 4 forks source link

Subjet of @mail #33

Closed operon closed 6 years ago

operon commented 6 years ago

When I receive the @ mail, I do not have a "subject"?

I configured a hidden field "subjet" with "message subject" in default value.

andrewscaya commented 6 years ago

Hello @operon,

Please see my reply here : https://github.com/andrewscaya/mod_simpleemailform/issues/19#issuecomment-293685479

If you have any further questions, please do not hesitate to reply to this message.

Best regards,

Andrew Caya

operon commented 6 years ago

Hello,

I read # 19 but I do not see the connection with my problem

andrewscaya commented 6 years ago

Hi @operon,

For security reasons, the Subject field can no longer be a hidden field, as HTML hidden fields cannot be thoroughly filtered, validated and sanitized, since they can contain just about anything.

Quote from #19:

The "hidden" feature has not been modified as such in version 2.x. But, it is true that, as of version 2.0.0, the "hidden" feature can no longer be applied to the 'From' and the 'Subject' fields (see source), as this allows these fields to be submitted to specific constraint validations (ex. email validation). I would therefore strongly advise against changing this new way of using the "hidden" feature.

Also, we are leaving these possible combinations ('From' and/or 'Subject' + "hidden") unmodified in SEF's admin panel for now, as we do want to make sure that the 'classic' mode remains fully functional until it is removed in version 3.0.0.

If you have any further questions, please do not hesitate to send them to us.

Many thanks for your interest in the Simple Email Form module.

Best regards,

Andrew Caya

operon commented 6 years ago

Thanks, it is ok now.

Do not use "hidden"