Security question and social buttons

[buildingblocks]

In the tutorials for security measures step 10 says

10. Disable "Allow Guest To Tell A Friend" feature

You may wish to go to Admin > Configuration > Email Options > Allow Guest To Tell A Friend and set the option to false. This will prevent non-logged-in customers from using your server to send unwanted email messages.


On some websites folks are adding addthis social button groups to their product pages. The group of buttons includes an email icon with the ability for people to send emails to others from the product page. The email form has fields for the senders and recipients email address. Is this really ok to have on our product pages?

[kobra]

Is this really ok to have on our product pages?

I would edit the code for that module and comment out/remove that ability

[buildingblocks]

that's the feeling I was having about it. I put it on my site earlier today too and then it occurred to me about the email which couldn't be completely removed. I'll look for something else.

Thanks

[kobra]

it occurred to me about the email which couldn't be completely removed

?????

It was coded so should be able to un-coded

[buildingblocks]

Part of the code is a "bookmark/share this" widget called by javascript from someone else's server so the email can't be removed from the widget.

[kobra]

called by javascript

Edit the .js and make it only

bookmark this

[buildingblocks]

This is the code I'm talking about, the script portion

<!-- AddThis Button BEGIN -->
<div class="addthis_toolbox addthis_default_style ">
<a class="addthis_button_facebook_like" fb:like:layout="button_count"></a>
<a class="addthis_button_tweet"></a>
<a class="addthis_counter addthis_pill_style"></a>
</div>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4d017efc1036d50b"></script>
<!-- AddThis Button END -->

[kobra]

I see - - you do not have the js locally
But you can grab it here - remove space
http: //s7.addthis.com/js/250/addthis_widget.js

[buildingblocks]

Thanks!