The from field is being formed like this:

Joe Submitter

This is highly problematic because people are hitting "reply" and sending, mistakenly, confidential email to the administrator.

I can imagine concern about revealing, inadvertently, someone's email address to a group by putting the author's email in the From line. But this should be configurable. The group in question is closed and everyone in the group has each other's email.

I appreciate the help.

Shai Gluskin

Comments

Shai’s picture

Shai commented

Oops. My example got stripped because I forgot to use the code tag.

The "From" email is being formed like this:

Joe Submitter <adminemail@adminmail.com>

Steve Dondley’s picture

Steve Dondley commented

I think instead of the administrator's email address, there should be a configurable "no-reply@" email address for organic groups. That way, if someone responds to an e-mail, it can bounce and let them know that the proper way to respond to a post made in an organic group is through the website.

Duncan Pierce’s picture

Duncan Pierce commented

This is a problem for me too. Ideally I'd like replies to go to the group owner, but an auto-responder as suggested by Steve would be ok and preferably in some circumstances.

There are several reasonable solutions - which is best depends on the situation. For a website named "Website" with a group named "Group" administered by "Gary Group-Owner" <gary@example.com> and a post from "Patricia Poster" <patricia@another.example.com> we might want the notification email to come from:

  • "Patricia Poster" <patricia@another.example.com> - Shai's situation
  • "Website" <NO-REPLY@example.com>
  • "NO-REPLY" <NO-REPLY@example.com>
  • "Gary Group-Owner" <gary@example.com>
  • "Group" <gary@example.com> - currently facing this one on xpday.org

And maybe others. There is a smallish set of reasonable From: names and From: addresses but probably not a direct one-to-one mapping.

moshe weitzman’s picture

moshe weitzman commented
Category: support » feature
Priority: Critical » Normal
moshe weitzman’s picture

moshe weitzman commented
Status: Active » Closed (won't fix)

initially, i think this could be done in a contrib module that implements hook_mail_alter(). the username is in the from address already, so one could grab the email address .. please give good warning to admins that email addresses will suddenly be exposed to subscribres and form_alter() away the advisory on the profile edit form under email address.

Duncan Pierce’s picture

Duncan Pierce commented

See also this issue, which looks like a duplicate which has been implemented.

moshe weitzman’s picture

moshe weitzman commented
Status: Closed (won't fix) » Closed (duplicate)