Changes for version 1.6
- Fixed vulnerability where newlines could be embedded in subject, name, etc and used to create a completely custom message for spammers. Validation is now performed by Data::FormValidator and can be customized by 'validation_profile'.
- NOTE - the older 'alert' parameter is still passed into the form template
- as the first error message encountered on the form. This exists for backwards
- compatability but should be considered deprecated.
- Added 'max_emails_per_request' and 'max_emails_per_hour' to avoid being used as a spam relay.
- Added original requestor's IP address to the outgoing email headers to avoid being seen as the sender if the message is hijacked for spam
Modules
module to allow users to send HTML pages to friends.