Plugin modifies “from” address in emails, which prevents emails being sent

  • Resolved FireMyst

    (@firemyst)


    7 years, 8 months ago

    There is a major problem with this plugin.

    It isn’t sending subscription confirmation emails or any other comment emails. After investigating, it looks like the plugin’s contact form is forging the “From:” header on outgoing emails (which means that the form creates the email as though it was sent by the email address entered by the user) as opposed to using the built in domain account WordPress is running under.

    This runs into issues with email providers like Yahoo, Hotmail, Gmail, AOL accounts, and so on.

    The other issue is some hosting providers have such domains listed in their system’s mail filter as common targets for abuse. Because of the way the form sends the emails, any message from an @aol.com, @yahoo.com, or @hotmail.com email address could be discarded by the system filter when it doesn’t come from the underlying domain’s account. This is to prevent spamming or allowing spammers to send emails from domains different than specified in the “from” address.

    If this is indeed the underlying functionality, the authors need provide an option to set the “From” address such as “[email protected]” instead of trying to set the “from” field as the person who submitted the comment.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author gVectors Team

    (@gvectors-team)

    Hi FireMyst,
    Please check the wpDiscuz functions and you’ll see that there is no “major problem with this plugin”. wpDiscuz uses WP installation admin email and admins may use @yahoo.com or other above mentioned domains but not website domain. This is the problem.

    1. Do you know that WordPress uses “[email protected]” email as a from address? So the default From email doesn’t look good for website owners.

    2. wpDiscuz uses the email admin set on installation as the From Email. The From email is the email set by you in Dashboard > Settings > General admin page. So the FROM email changing option already exists and you just need to insert email address with your domain, such as [email protected]. That’s it. Here is the wpDiscuz function:
     

    3. In case you don’t want to use WordPress installation admin email you can use WordPress hook and put this code in theme’s functions.php file to change it (this has been provided in dozens of our support questions):
    https://gvectors.com/forum/how-to-and-troubleshooting/emails-are-coming-from-wordpress-com-i-dont-want-that-where-do-i-change-it/#post-1331

    function res_fromemail($email) {
$wpfrom = '[email protected]'; return $wpfrom;
}
function res_fromname($email){
$wpfrom = get_option('blogname');return $wpfrom;
}
add_filter('wp_mail_from', 'res_fromemail');
add_filter('wp_mail_from_name', 'res_fromname');

    4. So there is already two ways (#2 and #3) to change your FROM email. in case you don’t want to use admin email and don’t want to put the code in functions.php we’ll add an option in future versions to add an FROM email address for wpDiscuz emails.

    Thread Starter FireMyst

    (@firemyst)

    Thank you for the response and options.

    1) Yes.
    2) We don’t want to use our specified “admin” address because spammers can get ahold of that. We want that for WordPress itself only to communicate with us.
    3) Not a viable option as this means every time there’s an update we’ll possibly have to go back and modify the functions.php file again. Not ideal.
    4) This is the best and preferred way to go. Other plugins have that option out-of-the-box already, so surprised wpDiscuz doesn’t have it yet. Hopefully you guys will incorporate it before we finish evaluating other plugins. ??

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Plugin modifies “from” address in emails, which prevents emails being sent’ is closed to new replies.