Fixed now.
Buffistas Building a Better Board ++
Do you have problems, concerns, or recommendations about the technical side of the Phoenix? Air them here. Compliments also welcome.
Okay -- I've double-triple checked we can't be used as a relay. However, I can't think of a way to reliably weed out the bastards.
If they're using the 'e-mail admins" form, can we capture their IP address? Would that do us any good, or is it likely to be fake?
Can we stop b.org return addresses from being accepted?
I can embed that information into the e-mails. Let's see if anything comes of it.
As for blocking b.org addresses -- dammit, I hate those kids. We shouldn't have to do that. There are legit (though avoidable) reasons to accept b.org addresses.
We shouldn't have to do that.
Yeah, I know.
Although, thinking about the e-mail form a bit, do we need it, as opposed to just using a mailto link? The form is nice because is fills in the user's default e-mail address, but most of the messages we get are from people who either aren't Buffistas yet, or have forgotten their username or password, and therefore aren't logged in anyway. For them, the form doesn't really provide any more functionality than a mailto would, does it?
The form means that people who don't have access to their e-mail clients can still send messages to the admins.
can we capture their IP address
You'll want to be careful about blocking IP addresses. You can quickly block all aol.com users because they use proxy servers, for example.
a mailto link
Spambots look for mailto links, so that may make things worse. This may help with this problem, however: [link]
Edit: ita makes a good point about email clients.
We already have a mailto link on the page. That genie's out of the bottle.
You'll want to be careful about blocking IP addresses. You can quickly block all aol.com users because they use proxy servers, for example.
Yeah, we know that. Not talking about blocking IPs, more like reporting the little morons to abuse at their ISP if we can track them down.
The original scripts were launched with AOL return addresses as I recall.