- Posts: 240
- Thank you received: 17
Deposit Completion Email
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
9 years 2 months ago #93591
by Donal
Deposit Completion Email was created by Donal
Hi,
today, the deposit completion emails were sent out. In general, its working perfectly.
So far, 2 customers have got in touch with security warnings. It appears that in the email on their computers, the link to the payment completion page had the IP address instead of my site domain name. I have BCC configured to send the email to our email address as well, and the address is fine in the BCC, i.e. it includes the domain name.
Have you any suggestion about this? I think it may be to do with how the client renders the domain name, but 1 of the customers uses gmail and the other is company managed Outlook.
Thanks,
Donal
today, the deposit completion emails were sent out. In general, its working perfectly.
So far, 2 customers have got in touch with security warnings. It appears that in the email on their computers, the link to the payment completion page had the IP address instead of my site domain name. I have BCC configured to send the email to our email address as well, and the address is fine in the BCC, i.e. it includes the domain name.
Have you any suggestion about this? I think it may be to do with how the client renders the domain name, but 1 of the customers uses gmail and the other is company managed Outlook.
Thanks,
Donal
Please Log in or Create an account to join the conversation.
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 240
- Thank you received: 17
9 years 2 months ago #93677
by Donal
Replied by Donal on topic Deposit Completion Email
Can anybody think of a reason why this might have happened? Is there a limit to DNS lookups or something? About 300 emails were sent to customers, I received a BCC for these, so 600 emails were sent. The plugin is set to send 30 emails at a time.
Its a real nightmare asking people to complete their payment (having already paid a deposit) and then getting security warnings that "Attackers might be trying to steal your information"!
Thanks for any thoughts.
Donal
Its a real nightmare asking people to complete their payment (having already paid a deposit) and then getting security warnings that "Attackers might be trying to steal your information"!
Thanks for any thoughts.
Donal
Please Log in or Create an account to join the conversation.
- James Riley
-
- Offline
- Platinum Member
-
9 years 2 months ago - 9 years 2 months ago #93679
by James Riley
James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
Replied by James Riley on topic Deposit Completion Email
Several hosting companies that we've been with have a per-hour limit for the number of emails that can be sent for SMTP-based outbound email. I don't know if PHP routes through SMTP (I know there is a Joomla config setting for sendmail / smtp / PHPmail???). For example, my current hosting provider gives me these specs for email:
Maybe you're hitting a max-per-hour limit??
Maybe you're hitting a max-per-hour limit??
James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
Last edit: 9 years 2 months ago by James Riley.
Please Log in or Create an account to join the conversation.
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 240
- Thank you received: 17
9 years 2 months ago #93680
by Donal
Replied by Donal on topic Deposit Completion Email
Hi James,
thanks for thinking about this problem. I can send 600 emails per hour, and had the deposit payment request plugin set to 30.
The emails all got sent, I think.
My issue is that the payment request link which should have been
www.mysite.com/paymentrequesturl
got changed (for a tiny few people) to, e.g.
168.15.1.5/paymentrequesturl
As my SSL cert is set up for my domain name, the people who tried to visit the URL with IP address got security warnings.
It seems to be mostly gmail users who received the link with IP address. I was BCC'ed on the emails, and my BCC copy of the email has the domain name.
Its a mystery, and pretty serious!
Thanks again,
Donal
thanks for thinking about this problem. I can send 600 emails per hour, and had the deposit payment request plugin set to 30.
The emails all got sent, I think.
My issue is that the payment request link which should have been
www.mysite.com/paymentrequesturl
got changed (for a tiny few people) to, e.g.
168.15.1.5/paymentrequesturl
As my SSL cert is set up for my domain name, the people who tried to visit the URL with IP address got security warnings.
It seems to be mostly gmail users who received the link with IP address. I was BCC'ed on the emails, and my BCC copy of the email has the domain name.
Its a mystery, and pretty serious!
Thanks again,
Donal
Please Log in or Create an account to join the conversation.
- James Riley
-
- Offline
- Platinum Member
-
9 years 2 months ago #93681
by James Riley
James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
Replied by James Riley on topic Deposit Completion Email
Ahhh. I mis-read your post and thought that you meant that 300 of 600 emails had been sent based on the number of BCCs you received.
Certainly is strange why a URL would be re-written to an IP address, especially when the BCC'd email show the proper link (as you mentioned in your first post). There really is no reason why they should be different at all! I've never run up against this before.
Certainly is strange why a URL would be re-written to an IP address, especially when the BCC'd email show the proper link (as you mentioned in your first post). There really is no reason why they should be different at all! I've never run up against this before.
James Riley .: EventBooking user since 2014 ::: JoomDonation user since 2016 :.
.: grfx & web design / IT / AV @ St. Therese Institute of Faith and Mission, Bruno, SK, Canada :.
The following user(s) said Thank You: Donal
Please Log in or Create an account to join the conversation.
- Tuan Pham Ngoc
- Offline
- Administrator
-
9 years 2 months ago #93731
by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic Deposit Completion Email
Honestly, I don't know about this, too. Maybe there is something on their mail server which converts the domain to IP when it is received... but I am not sure
Events Booking just use Joomla core API JUrl::root() to get URL of the site and in few years, I haven't seen anyone reported issue like that. From programming point of view, I could not see why it happens, too
I can only image that there is something changes the URL to IP when the email received which I don't know
Tuan
Events Booking just use Joomla core API JUrl::root() to get URL of the site and in few years, I haven't seen anyone reported issue like that. From programming point of view, I could not see why it happens, too
I can only image that there is something changes the URL to IP when the email received which I don't know
Tuan
Please Log in or Create an account to join the conversation.
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 240
- Thank you received: 17
9 years 2 months ago #93786
by Donal
Replied by Donal on topic Deposit Completion Email
I thought as much, Tuan.
The very odd thing is that one of my customers was happy to engage with me to try to do some fault finding. I emailed him a link (including domain name) from Outlook, and this time he received the proper link???
It's a real mystery!
This has now happened to about 10 people out of 200.
Regards,
Donal
The very odd thing is that one of my customers was happy to engage with me to try to do some fault finding. I emailed him a link (including domain name) from Outlook, and this time he received the proper link???
It's a real mystery!
This has now happened to about 10 people out of 200.
Regards,
Donal
Please Log in or Create an account to join the conversation.
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 240
- Thank you received: 17
8 years 8 months ago #100851
by Donal
Replied by Donal on topic Deposit Completion Email
Our next round of events which require the deposit completion email are about to start, and the deposit completion reminder has just been sent. A number of people have gotten in touch to say that the link is insecure, and sure enough, our domain name has been replaced by the IP address again.
I use acymailing and links in other emails from EB work perfectly. It only seems to be this [DEPOSIT_PAYMENT_LINK] which is working incorrectly.
Is there any debug mode I can turn on to try to get to the bottom of the issue? Its pretty serious, as I will be sending out about 500 more deposit completion email reminders in the coming weeks.
Thanks,
Donal
I use acymailing and links in other emails from EB work perfectly. It only seems to be this [DEPOSIT_PAYMENT_LINK] which is working incorrectly.
Is there any debug mode I can turn on to try to get to the bottom of the issue? Its pretty serious, as I will be sending out about 500 more deposit completion email reminders in the coming weeks.
Thanks,
Donal
Please Log in or Create an account to join the conversation.
- Tuan Pham Ngoc
- Offline
- Administrator
-
8 years 8 months ago #100863
by Tuan Pham Ngoc
Replied by Tuan Pham Ngoc on topic Deposit Completion Email
Hello Donal
Could you please forward a sample email which contains this invalid links to my email tuanpn@joomdonation.com so that I can take a quick look?
All the link user Joomla core API for getting the site URL,so I don't know why some links contains IP address like you said
Regards,
Tuan
Could you please forward a sample email which contains this invalid links to my email tuanpn@joomdonation.com so that I can take a quick look?
All the link user Joomla core API for getting the site URL,so I don't know why some links contains IP address like you said
Regards,
Tuan
Please Log in or Create an account to join the conversation.
- Donal
- Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 240
- Thank you received: 17
8 years 8 months ago #100962
by Donal
Replied by Donal on topic Deposit Completion Email
Hi Tuan,
just double checking that you received the email which I sent yesterday?
Regards,
D
just double checking that you received the email which I sent yesterday?
Regards,
D
Please Log in or Create an account to join the conversation.
Moderators: Tuan Pham Ngoc
Support
Documentation
Information
Copyright © 2026 Joomla Extensions by Joomdonation. All Rights Reserved.
joomdonation.com is not affiliated with or endorsed by the Joomla! Project or Open Source Matters.
The Joomla! name and logo is used under a limited license granted by Open Source Matters the trademark holder in the United States and other countries.
The Joomla! name and logo is used under a limited license granted by Open Source Matters the trademark holder in the United States and other countries.