Tell-A-Friend Feature Exploited

[risrik]

I just got word that my client's tell-a-friend feature has been exploited and is causing spam complaints from the upstream provider. They had to shut the page down. Is there anything that can be done to stop these programs from using the feature to send their own emails? I can't seem to find anything on this issue and I'm surprised it isn't more widespread.

[germ]

I just got word that my client's tell-a-friend feature has been exploited and is causing spam complaints from the upstream provider. They had to shut the page down. Is there anything that can be done to stop these programs from using the feature to send their own emails? I can't seem to find anything on this issue and I'm surprised it isn't more widespread.

I've never heard of it being "exploited" unless someone was naive enough to set "Allow guest to tell a friend" to true in the Admin.

 

With it set that way any wandering robot will spam the hell out of everyone and their brother...

:o

 

It needs to be set false

 

If that's not the case you'd probably need some CAPTCHA contribution to stop it.

[risrik]

Thanks for the reply. They did have it set to True which allowed guests to use it. I didn't set up their store and wasn't aware that this could be turned off. In any case, I made the change and all is good. :)