Massmailer

Good morning,

It looks like the Massmailer in the Communitybuilder on our website is being used to send SPAM. Is there a way to completely disable this function (Massmailer)? Or is there another control mechanism that prevents misuse?

The affected files are (likely):
administrator/components/com_comprofiler/view/view.users.php
components/com_comprofiler/plugin/language/default_language/admin_language.php

We are using the current version 2.2.1

What other information do you need from us? Can you help us here please?

Thank you very much and best regards,
Fabian

Mass Mailer can't be used to send spam unless you have an administrator deliberately using it to do that. It is only functional from backend CB > User Management and only allowed for administrators. Suggest you evaluate who you've given administrator access to and remove their access immediately.

Thank you for your quick answer!

And good to know that it seems to be impossible to misuse the massmailer. That was just an assumption of our internet provider. But just in case: Is there a possibility to deactivate this feature? It would be a good opportunity for us to test which program is responsible for the SPAM.

Best regards,
Fabian

No, the mass mailer can't be disabled. Simply don't give people you don't trust backend access. You probably have a user sending other users emails from their profiles directly using the email form, which you can disable by setting "Email Handling" to "Do Not Display Email" within CB > Configuration > General. Beyond that you'll need to discuss with your server host to review mailer logs to see what exactly is being sent. It could also just be your host is flagging emails as spam because your Welcome or Pending registration emails in CB > Configuration > Registration could contain too many flags or is too generic; again something you need to discuss with your host.