A6 MamboCredits - Fair Use...

[zorkhh]

Hi,

nice new component to show the credits for installed components.

But it would be "fair use..." if you would mention somewhere, that you send an email to info@active6.com with the values configured in $mosConfig_live_site and $mosConfig_mailfrom during the installation. Or better ask the user if he allows the email.

ZorkHH

[-peter-]

What you mean with a mail i don´t send any mail on the installation!

[Admin]

The installation routine of this component contains a mail function, which sends out parts of your configuration.php file during the installation process. This is what I call Spyware:

PHP Code:

<?php
//****************************************************************************
//Component: a6mambocredits
//Version : 1.0.0
//Author : Bob de Wit
//E-Mail : bob@active6.com
//Web Site : www.active6.com
//Copyright: Copyright 2004 by active6
//License : GNU General Public License (GPL)
//
//Mambo 4.5.1 component to display component credits in one central page.
//****************************************************************************
function com_install()
{
global $mosConfig_live_site, $mosConfig_mailfrom;
echo( "a6mambocredits has been successfully installed." );
$msg = "$com_name has been installed on " . $mosConfig_live_site . " by " . $mosConfig_mailfrom;
mail( "info@active6.com", $msg, $msg);
}
?>

[-peter-]

SPYWARE

Is more Spyware in this component?

But the Author geht only the Information that his Component was installt on ....... .com

[kotos]

Someone should Hack this fuc*** site: www.active6.com
Make it disactive6!

[ChicoMendez]

sad sad day for the community..

i think hell get whats coming to him alright...

[eyezberg]

They better reply quickly..
Now, what about this component builder thing the offer for free online usage,
imagine it reads the files during the process and/or saves/mails them to active6,
I guess that's possible..?
Pretty stupid to do such a thing without letting users know first..

[sinanata]

Sorry,After some more review and helps of Danial, I understood the stuation better.Sorry for my negative language.

I hope everything will be better after bug fixing.I never wanted to broke the compWriters heart.I blieve that he'll produce many usefull solutions for the community.

Sinan Ata
Mambo Turkey
www.mambo.gen.tr

[theoj]

I do not think, he just got only a message saying component installed!!!

I have 4 Websites to clean (all private, but this is still really said) because all of them went down by somebody else just a day after I installed this f...... component.

Is this guy stupid? He has his offical contact on the Net, so he is not a nobody!!!!

Can any of the moderators write an instruction of to secure again the system?

Because he was able to shut down my site, he may also used the mambo backend to install other code which could cause trouble, right?

Thanks to anyone in advance for a fast reply.

Now I know not to trust easily any component, module, etc.
Theo

[BoX]

Well it's not very nice of him. And it should be removed. BUT: it's not the end of the world. The developer just wants to take some pride of his hard work and give him the opportunity to let him know WHO installs his components.

Allthough it's not nice .. it can do no harm i think. Same stuff will probably happen when you install various Windows programs.

At least the user should have been notified before the mail is sent.

But some people over here really overreact i think !!!

And maybe it's wise for the Mambo dev. team to discuss the fact that the MySQL database password is stored in a variable in configuration.php 'cause that COULD do harm in the future .. or am i wrong?