[SAC] Fwd: SPAM Alert!

[Sandro Santilli]

On Tue, May 23, 2017 at 03:59:49PM -0300, Jeff McKenna wrote:
> On 2017-05-23 2:47 PM, Sandro Santilli wrote:
> > On Tue, May 23, 2017 at 04:23:33PM +0200, Christian Willmes wrote:
> > 
> > > So, please be careful in accepting requests, better contact the user
> > > directly and ask him/her about his/her intentions.
> > 
> > Could it be possible to include the confirmed email of the requestor
> > in the notification mail to this list, so that we can maybe do
> > this step publically (like we do for mantra-requests) ?
> > 
> > Even better, don't produce an email *at all* if the candidate
> > email was not confirmed...
> 
> You may have noticed that I have been modifying that same notification email
> to the admins, so it doesn't contain escaped text and also contains a
> working link to the ConfirmAccounts page (yay!).  Please note that this
> ConfirmAccount extension only sends out this notification when that
> (spammer) has confirmed his/her email account.  So, I am not sure how the
> spammer/bot avoids this now.

Ah, great. So that part is already done, cool :)

> I have looked into the ConfirmAccount settings, and I don't see a magical
> variable to add so that I could include that 'confirmed' email address, in
> the email to admins.  I'll keep looking.
> 
> I hope this answers your questions, or, tries to?

It does answer it, yes. Thanks for keep looking as I think it could
help to move the conversation from web to email as Christian was
suggesting.

--strk;