Deposit Completion Email

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
9 years 2 months ago #93591 by Donal
Deposit Completion Email was created by Donal
Hi,
today, the deposit completion emails were sent out. In general, its working perfectly.
So far, 2 customers have got in touch with security warnings. It appears that in the email on their computers, the link to the payment completion page had the IP address instead of my site domain name. I have BCC configured to send the email to our email address as well, and the address is fine in the BCC, i.e. it includes the domain name.
Have you any suggestion about this? I think it may be to do with how the client renders the domain name, but 1 of the customers uses gmail and the other is company managed Outlook.
Thanks,
Donal

Please Log in or Create an account to join the conversation.

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
9 years 2 months ago #93677 by Donal
Replied by Donal on topic Deposit Completion Email
Can anybody think of a reason why this might have happened? Is there a limit to DNS lookups or something? About 300 emails were sent to customers, I received a BCC for these, so 600 emails were sent. The plugin is set to send 30 emails at a time.

Its a real nightmare asking people to complete their payment (having already paid a deposit) and then getting security warnings that "Attackers might be trying to steal your information"!

Thanks for any thoughts.
Donal

Please Log in or Create an account to join the conversation.

More
9 years 2 months ago - 9 years 2 months ago #93679 by James Riley
Replied by James Riley on topic Deposit Completion Email
Several hosting companies that we've been with have a per-hour limit for the number of emails that can be sent for SMTP-based outbound email. I don't know if PHP routes through SMTP (I know there is a Joomla config setting for sendmail / smtp / PHPmail???). For example, my current hosting provider gives me these specs for email:




Maybe you're hitting a max-per-hour limit??

James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
Last edit: 9 years 2 months ago by James Riley.

Please Log in or Create an account to join the conversation.

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
9 years 2 months ago #93680 by Donal
Replied by Donal on topic Deposit Completion Email
Hi James,

thanks for thinking about this problem. I can send 600 emails per hour, and had the deposit payment request plugin set to 30.

The emails all got sent, I think.

My issue is that the payment request link which should have been
www.mysite.com/paymentrequesturl
got changed (for a tiny few people) to, e.g.
168.15.1.5/paymentrequesturl

As my SSL cert is set up for my domain name, the people who tried to visit the URL with IP address got security warnings. :(

It seems to be mostly gmail users who received the link with IP address. I was BCC'ed on the emails, and my BCC copy of the email has the domain name.

Its a mystery, and pretty serious!

Thanks again,
Donal

Please Log in or Create an account to join the conversation.

More
9 years 2 months ago #93681 by James Riley
Replied by James Riley on topic Deposit Completion Email
Ahhh. I mis-read your post and thought that you meant that 300 of 600 emails had been sent based on the number of BCCs you received.

Certainly is strange why a URL would be re-written to an IP address, especially when the BCC'd email show the proper link (as you mentioned in your first post). There really is no reason why they should be different at all! I've never run up against this before.

James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
The following user(s) said Thank You: Donal

Please Log in or Create an account to join the conversation.

More
9 years 2 months ago #93731 by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic Deposit Completion Email
Honestly, I don't know about this, too. Maybe there is something on their mail server which converts the domain to IP when it is received... but I am not sure

Events Booking just use Joomla core API JUrl::root() to get URL of the site and in few years, I haven't seen anyone reported issue like that. From programming point of view, I could not see why it happens, too

I can only image that there is something changes the URL to IP when the email received which I don't know

Tuan

Please Log in or Create an account to join the conversation.

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
9 years 2 months ago #93786 by Donal
Replied by Donal on topic Deposit Completion Email
I thought as much, Tuan.
The very odd thing is that one of my customers was happy to engage with me to try to do some fault finding. I emailed him a link (including domain name) from Outlook, and this time he received the proper link???
It's a real mystery!
This has now happened to about 10 people out of 200.
Regards,
Donal

Please Log in or Create an account to join the conversation.

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
8 years 8 months ago #100851 by Donal
Replied by Donal on topic Deposit Completion Email
Our next round of events which require the deposit completion email are about to start, and the deposit completion reminder has just been sent. A number of people have gotten in touch to say that the link is insecure, and sure enough, our domain name has been replaced by the IP address again.

I use acymailing and links in other emails from EB work perfectly. It only seems to be this [DEPOSIT_PAYMENT_LINK] which is working incorrectly.

Is there any debug mode I can turn on to try to get to the bottom of the issue? Its pretty serious, as I will be sending out about 500 more deposit completion email reminders in the coming weeks.
Thanks,
Donal

Please Log in or Create an account to join the conversation.

More
8 years 8 months ago #100863 by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic Deposit Completion Email
Hello Donal

Could you please forward a sample email which contains this invalid links to my email tuanpn@joomdonation.com so that I can take a quick look?

All the link user Joomla core API for getting the site URL,so I don't know why some links contains IP address like you said

Regards,

Tuan

Please Log in or Create an account to join the conversation.

  • Donal
  • Topic Author
  • Offline
  • Elite Member
  • Elite Member
More
8 years 8 months ago #100962 by Donal
Replied by Donal on topic Deposit Completion Email
Hi Tuan,
just double checking that you received the email which I sent yesterday?
Regards,
D

Please Log in or Create an account to join the conversation.

Moderators: Tuan Pham Ngoc