[#17223] - Send mass mail includes all recipient addresses in mail in default setting
- Closed
- 29 Jul 2017
- Medium
- Build: 3.7.3
- # 17223
Steps to reproduce the issue
Send a mass mail to all users from the backend menu Users -> Mass Mail Users.
Forgot to set "Recipients as BCC"
Expected result
The mail to the recipient should only contain the recipient himself in the "TO" field.
Actual result
All recipients are in the "TO" field.
System information (as much as possible)
Joomla! Version Joomla! 3.7.3 Stable [ Amani ] 4-July-2017 08:03 GMT
Additional comments
It would be best to set the defaults to an more save value like the "Recipients as BCC" and the group selection not to "All Users Groups" by default.
Votes
joomla-cms-bot
- | Category | ⇒ | com_mailto |
Because if you have thousands of users you might hit a server restriction on the number of emails you can send
ok, I understand.
But is there not a problem with data privacy?
I think, here in Germany that is a problem. A site owner is not allowed to publish private data without the approval of the user. And with this settings in mass mail sending, I publish all email addresses to all users in the sending mails.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17223.
thats why there is the option to send as BCC
There is a case for making BCC enabled by default if someone wants to do a Pull Request to make that change
If I go to "Users -> Mass Mail" Send as BCC is not enabled. I have to enable it each time.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17223.
That is why I said
There is a case for making BCC enabled by default if someone wants to do a Pull Request to make that change
ok sorry. I missunderstood...
How to do that? :-) Is there a howto for new developers?
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17223.
| Status | New | ⇒ | Discussion |
Actually it looks like it is a bug. The field is defined to be bcc by default but for some reason that isnt working
I would classify it as a bug, with security aspects. Recipients in the TO: field is a data leak. Think its not Low, because of the consequences.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17223.
| Priority | Low | ⇒ | Medium |
set it on "Medium".
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-07-29 16:35:04 |
| Closed_By | ⇒ | zero-24 |
Why not sending ONE mail to EACH recipient only with one his address in the TO-field?
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/17223.