Subj : emailval.js accepts incomplete email addresses
To : Codefenix
From : MRO
Date : Thu Aug 29 2024 05:19 pm
Re: emailval.js accepts incomplete email addresses
By: Codefenix to All on Thu Aug 29 2024 08:30 am
> In any case, I copied emailval.js script to /sbbs/mods, and added a check to
> the SendValidationEmail function to ensure that user.netmail values contain
> both a "@" and a ".":
>
> if (user.netmail.indexOf(".") < 0 && user.netmail.indexOf("@") < 0) {
> console.print("\r\n'" + user.netmail + "' is not a valid email address!");
> console.pause();
> return;
> }
>
> This should screen out incomplete values, and prevent unwanted validation
> bypass attempts.
>
"user@null."
set it up to send the user the login password and disconnect them.
---
� Synchronet � ::: BBSES.info - free BBS services :::