<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Gregg,<br>
<br>
Allowing outsiders to edit the Subject line is risky.<br>
<br>
Did you know that you can (or certainly could in the past, I've done
it myself) actually embed an entire attachment in the Subject line
of an email? The most famous email app that would decode these
successfully was Outlook Express, but I wouldn't guarantee there
aren't others out there that can still do it. So allowing anyone in
the world to edit the subject line would be allowing a route in for
viruses that hardly any virus scanners will ever detect. I never
found one that could spot it, except for my own MailScanner (which I
spent 12 years writing and supporting).<br>
<br>
Cheers,<br>
Jules.<br>
<br>
<div class="moz-cite-prefix">On Tue 02/02/21 09:55, Gregg Douglas
via ZendTo wrote:<br>
</div>
<blockquote type="cite"
cite="mid:WM!537af7cce934a9a8fb2f40cdf779800b4106c1a3eac2f913d5ba2f35d913677f13c2cbb15b5daa4132772448b5e00cbc!@mx.jul.es">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi,
<div><br>
</div>
<div>When a person that is external to the organization wants to
Drop-off a file, I see the Subject cannot be edited.</div>
<div><br>
</div>
<div>I noticed in the Change Log for Version 6.04-1 Beta</div>
<blockquote style="margin:0 0 0 40px;border:none;padding:0px">Subject
in new drop-off form can now only be edited if you are logged
in.</blockquote>
<div><br>
</div>
<div>Is there a reason for this? Can this not be changed so that
it is configurable in the config file?</div>
<div><br>
</div>
<div>Regards</div>
<div>Gregg</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="http://jul.es/mailman/listinfo/zendto">http://jul.es/mailman/listinfo/zendto</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
'The past is supposed to be a place of reference, not a place of
residence! There is a reason why your car has a big windshield and
a small rearview mirror. You are supposed to keep your eyes on where
you are going, and just occasionally check out where you have been.'
- Willie Jolley
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</body>
</html>