[pmwiki-devel] MailForm -> EMailForm

[Dominique Faure]

On 8/9/07, Patrick R. Michaud <pmichaud at pobox.com> wrote:
> On Thu, Aug 09, 2007 at 09:18:42PM +0200, Dominique Faure wrote:
> > On 8/9/07, Patrick R. Michaud <pmichaud at pobox.com> wrote:
> > > On Thu, Aug 09, 2007 at 02:12:45PM -0400, Ben Wilson wrote:
> > > > IIRC, there was one feature of the address verification that is either
> > > > not supported by earlier forms of PHP or did not play well with Win32
> > > > (or was that GMA that had the problem? I think each had one of the
> > > > problems.)
> > >
> > > What sort of address verification is needed?  Do we just want to
> > > verify that a given domain is a valid domain, or...?
> >
> > ...and has a working mailer registered, like in:
> >
> > $email_domain = explode("@",$email);
> > if (!checkdnsrr($email_domain[1],"MX")) die($errormsg);
>
> Are we checking the domain of the sender address, the recipient
> address, or both...?
>
> And I'm not entirely clear what (security) purpose is served
> here by checking the domain for a valid MX record -- surely
> a spammer will have no problem picking a domain for which
> this would succeed...?
>
> Pm
>

Damn, you're right. This kind of check is more meaningful to validate
an address in a registration process than to handle a mail delivery.

BTW, this kind of validation could be made by the page-changed notify
part to avoid extra erroneous mailer sollicitations: I know at least
one ISP (free.fr) allowing only a limited number of posts per day from
php, thus that could be better to use them efficiently, no?

-- 
Dominique