phpList / phplist3

Fully functional Open Source email marketing manager for creating, sending, integrating, and analysing email campaigns and newsletters.
https://www.phplist.org
GNU Affero General Public License v3.0
746 stars 269 forks source link

Privacy Issue: Unsubscribing response messages #967

Closed kleozzy closed 1 year ago

kleozzy commented 1 year ago

Hello ,

Testing on latest build: 3.6.13 i see that there are different messages when unsubscribing:

  1. For a valid subbed email and
  2. For a non-subbed email.

The distinct messages can be used by someone to identify subbed emails based on the response messages. Is there a way to adjust this so that the message is always the same (generic), regardless of validity ?

Is it something that can be added into the templates so that we can easily change without messing with the code itself ?

michield commented 1 year ago

I can't recall that. Can you give screenshots of the two situations? It can probably be managed with a language string.

kleozzy commented 1 year ago

Sure here they are:

  1. Non-valid email image
  2. Valid email image
michield commented 1 year ago

Thanks. You can change that by changing this string https://github.com/phpList/phplist-lan-texts/blob/master/english.inc#L44

to be the same one as the valid email one.

michield commented 1 year ago

I guess it will make sense to change both to something like "if you were subscribed, you will receive a confirmation of unsubscription shortly" or something like that.

kleozzy commented 1 year ago

Exactly

michield commented 1 year ago

Resolved with https://github.com/phpList/phplist-lan-texts/commit/3933161d06a86c1d5018daeae07c5ddff5a7a3f6