Zen Cart Logo
Forums / Reports of Security Problems / shop admin folder name showing in newsletter message source

shop admin folder name showing in newsletter message source

Views: 26

Results 1 to 3 of 3
27 Jun 2012, 12:19 PM
#1
skelly100 avatar

skelly100

New Zenner

Join Date:
Nov 2009
Posts:
34
Plugin Contributions:
0

shop admin folder name showing in newsletter message source

Hello team,

and thanks for all the great work.

Have been getting together my first newsletter (from within v1.5 admin, not a addon/mod) and sent a test one to myself.

If I view 'message source' of this newsletter I see my shop admin folder name under-

X-Source-Dir: mysite.com:/public_html/shop/renamed admin folder

In the past have had the occasional piece of software creating false accounts and signing up to newsletters,
could this be their motivation? Trying to harvest admin folder names?

I know catcha would stop the creation of false accounts, but hasn't happened in months, though I know some people are plagued by them.

Anyway, I am sure you agree, admin folder names shouldn't be in the public realm, period.

Regards,

SK

27 Jun 2012, 11:06 PM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: shop admin folder name showing in newsletter message source

That's not something that Zen Cart controls. It's your hosting company that adds those.

However, you can tell Zen Cart to use SMTPAUTH for email transport method if you want it to skip having your hosting company add those PHP headers to your messages.

28 Jun 2012, 1:18 AM
#3
skelly100 avatar

skelly100

New Zenner

Join Date:
Nov 2009
Posts:
34
Plugin Contributions:
0

Re: shop admin folder name showing in newsletter message source

Thanks very much for your reply.

I will do that.