2017-03-18, 01:45:40
(2017-03-15, 04:27:34)orthodox Wrote:(2017-03-14, 22:40:21)cumbe Wrote: Hi orthodox
I have not any time in these moments.
uff. thats not good news. because its a very critical bug as mentioned above. can you (or somebody else) recommend a secure contact form plugin???
Orthodox, you are only vulnerable to this specific PHPmailer issue if you have configured this plugin to use PHPmailer. By default, that is NOT used. To check if you are using PHPmailer, just go to your /plugins/cbcontact folder and look in the cbcontact_cfg.php file. I have a setting there that says "$cbfsendphpmail = false;" If that is set to false (like default) then the script does not use PHPmailer, instead it uses the built in mail() function. At least that's how this looks to me from a quick, glance at the code.