MLM Lists

[ianblackford]

Hi

What's to stop anyone guessing that I am using MLM and setting up their own list in my install?

What I mean is if someone uses:

mlm.php?cmd=subscribe&list=A-NEW-LIST&[email protected]

In my installation of MLM it will set up their email address in a new list called A-NEW-LIST. I realise they have to have my UN and PW to access it via MBM, but is this a security risk?

Just asking out of interest and playing devils advocate. :twisted:

 

[stanbusk]

Yes, you're right. A user can modify the MLM URL and subscribe itself to a new list however I don't see why a user would do that. Anyway I could add a new setting to activate or deactivate list auto-creation.