[RSS Feed/News] Email bans can be bypassed with sub-addressing and dots

Status
Not open for further replies.

XenForo

Administrative
  • Thread starter
  • Admin
  • #1
It is trivial to bypass XenForo email bans using sub-addressing (also known as "plus addressing") or, for some email providers such as Gmail, by inserting . dots between the local-part characters of the address.

To reproduce:
  1. Ban [email protected].
  2. Attempt to register a new account with [email protected]. The request should be blocked but it will be successful and the registration confirmation email will be delivered...

Read more

ادامه مطلب...
 
Status
Not open for further replies.
Back
Top Bottom