Commit 8f535993 authored by Dries's avatar Dries

- Patch #69202 by AjK, dopry, chx et al: don't allow anonymous users to send

  themselves a copy.  Prevents spam.
parent 14e925e3
......@@ -40,7 +40,7 @@ function contact_help($section) {
* Implementation of hook_perm
*/
function contact_perm() {
return array('access site-wide contact form', 'access personal contact forms');
return array('access site-wide contact form');
}
/**
* Implementation of hook_menu().
......@@ -106,7 +106,7 @@ function contact_menu($may_cache) {
'title' => t('contact'),
'callback' => 'contact_user_page',
'type' => MENU_LOCAL_TASK,
'access' => ($user->uid && user_access('access personal contact forms')),
'access' => $user->uid,
'weight' => 2,
);
}
......@@ -475,9 +475,13 @@ function contact_mail_page() {
'#title' => t('Message'),
'#required' => TRUE,
);
$form['copy'] = array('#type' => 'checkbox',
'#title' => t('Send yourself a copy.'),
);
// We do not allow anonymous users to send themselves a copy
// because it can be abused to spam people.
if ($user->uid) {
$form['copy'] = array('#type' => 'checkbox',
'#title' => t('Send yourself a copy.'),
);
}
$form['submit'] = array('#type' => 'submit',
'#value' => t('Send e-mail'),
);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment