Someone emailed a commenter through the plugin?

  • Resolved slobizman

    (@slobizman)


    11 years, 9 months ago

    Just had something really strange happen. A user of a website of mine said he received an strange email and it says it was from our site. I asked him to send the headers. They follow below.

    I’m posting here in this forum because of this line:

    X-Source-Dir: useraccountmedia.com:/public_html/wp-content/plugins/wp-ajax-edit-comments/php

    Does this mean that the email was created by this plugin?

    (I’ve changed some domain and user info in this to disguise my server info)

    x-store-info:fHNTDlzCF8Nxw6HwcfGQy+S7Ax/lqLSmNphQ3OF+T9E=
Authentication-Results: hotmail.com; spf=none (sender IP is xx.xxx.xxx.xx) [email protected]; dkim=none; x-hmca=none
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: 5cuOr7VrmjBwCXgOIB2nrtfBWP/ZRZ5MFsMPQuLj/Tb9am9RaMk4prrlvVceZDpFHLLUY/WOE6JDwR4k9bkYpJRPt5HfODCZjUmsMm/OyD4wgeTuxHzostze7BvrEL2scoKzX3VkejwJouZntQtAbFsNFKH1aiXY
Received: from host3.mysite.com ([xx.xxx.xxx.xx]) by SNT0-MC4-F10.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
	 Wed, 20 Feb 2013 20:37:03 -0800
Received: from useraccount by host3.mysite.com with local (Exim 4.80)
	(envelope-from <[email protected]>)
	id 1U8Nu2-0005Ea-US
	for [email protected]; Wed, 20 Feb 2013 23:37:02 -0500
To: [email protected]
Subject: You close to Orlando?
Date: Thu, 21 Feb 2013 04:37:02 +0000
From: IHTM <>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.4]
MIME-Version: 1.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host3.mysite.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [509 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - host3.mysite.com
X-Get-Message-Sender-Via: host3.mysite.com: authenticated_id: useraccount/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php
X-Source-Dir: useraccountmedia.com:/public_html/wp-content/plugins/wp-ajax-edit-comments/php
Return-Path: [email protected]
X-OriginalArrivalTime: 21 Feb 2013 04:37:03.0767 (UTC) FILETIME=[18C6CA70:01CE0FED]

Curious if you\'re very close to Orlando area?

    https://www.ads-software.com/extend/plugins/wp-ajax-edit-comments/

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Contributor Ronald Huereca

    (@ronalfy)

    Yes, one of the features is that an editor/administrator can send a commenter an e-mail through the plugin.

    Plugin Contributor Ronald Huereca

    (@ronalfy)

    You can also disable the e-mail feature by going into AEC -> Appearance and unchecking the e-mail feature.

    Thread Starter slobizman

    (@slobizman)

    Thanks for the reply Ronald. But there are only two of us with Administrator/Editor accounts, and neither of us emailed the person.

    Plugin Contributor Ronald Huereca

    (@ronalfy)

    I just double-checked. The author of the post can also e-mail commenters. That’s what it probably was.

    If not, then someone else that is fishy is going on.

    I would recommend just disabling the feature in AEC->Appearance if you don’t want this functionality present.

    Thread Starter slobizman

    (@slobizman)

    Aha! That must have been it. And yes, I’ll disable the feature.

    Thanks so much for getting back to me so quickly.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Someone emailed a commenter through the plugin?’ is closed to new replies.