On Apr 9, 2010, at 10:50 AM, Carl G. Kuczun wrote: > 1) When I try to insert a picture into an email, I get an error message: > "This file uploaded is disabled. Please check the > "editor\filemanager\connectors\php\config.php file" > I am using the fckeditor and I looked at it's config.php and didn't see any > place to enable uploads. How do I do that? Yup - check out the instructions on getting the uploader working correctly: http://dadamailproject.com/support/documentation-4_0_4/FAQ- ...Continue Reading

Two related questions: 1) When I try to insert a picture into an email, I get an error message: "This file uploaded is disabled. Please check the "editor\filemanager\connectors\php\config.php file" I am using the fckeditor and I looked at it's config.php and didn't see any place to enable uploads. How do I do that? 2) Is there a way to include a picture/clipart in an email that is not trapped by the email client security option that blocks images and external content in HTML emails? When I paste an ...Continue Reading

I have enabled the "Apply the list template to HTML email messages" option, but the right-justified subjects are always overlaping the logo on the left. In regular DadaMail windows, if you shrink the browser window, if the title is wider than the window width, it will eventually overlap the logo. I edited the default_css.css and copied it to \.dada_files\.templates\ adding the margin-left to make it wrap before my logo and changed the padding-top to allow it to wrap on two lines. Is there a way to do t ...Continue Reading

Yeah I understand that a type of one-click opt out is available already.  I want to keep the closed-loop opt out in place, to keep my list secure.  On our website, over the years, we have had to fend off several types of resource starvation attacks, that literally knocked us offline.  Apparently, someone has us in their crosshairs, and I'm guessing it is a competitor.  As a result, we closely guard many aspects of our information infrastructure, and our mailing list is a very valuable asset.On Apr 4 ...Continue Reading

Got it now.  I don't use closed loop opt-out in the interest of simplicity for the unsubscriber.  They click once and they are removed. I do get a notice, though, as I like to know which topics generate unsubs. Alan Hysinger wrote: Hi John, I am preparing a post to explain this more in depth, which I will post later today.  I understand your concern, and in a few words I want to say you need not worry about the scenario you explained. To clarify the discussion somewhat, there is the hack ...Continue Reading

Hi John,I am preparing a post to explain this more in depth, which I will post later today.  I understand your concern, and in a few words I want to say you need not worry about the scenario you explained.To clarify the discussion somewhat, there is the hack I currently use in my one modified copy of Dada, and then there is a proposed new feature that does the same thing, in a cleaner and more secure sort of way.  The proposed new feature will be developed in a different branch of the code, and won't affect t ...Continue Reading

John,Actually, what is going on here is that Dada Mail automatically generates a PIN in the unsubscribe process.  The link that the user clicks to unsubscribe contains the PIN to prevent someone from systematically creating unsubscribe links using a dictionary. The user usually has no interaction at all with the PIN.------------------------------Moshe KatzKatzNet Computers-- moshe@PROTECTED -- +1(301)867-3732 On Sun, Apr 4, 2010 at 10:31 AM, John Collins <john@PROTECTED> wrote: I'm not even sure that I'm f ...Continue Reading

I'm not even sure that I'm following this correctly.  It seems that it is a hack/future feature in which a subscriber has to enter their PIN in order to unsubscribe.  If this is true, I truly hope that it will be an option, not a standard feature.  Here's why:  With my large list I get a few unsubs after every blast.   Of these unsubs, some of them don't use the very obvious link in the blast, but instead reply and ask me to unsub them. It gets annoying after a while.  If a ...Continue Reading

Alan, I think a great idea would be for you investigate the feature yourself on a forked copy of Dada Mail by using github. It's quite easy to fork off Dada Mail, make your changes and then ask for a pull. I'm currently working on other parts of Dada Mail, so I can't really focus to much of myself on this part, but I'd be interested in what you find. For such a feature in such a sensitive part of Dada Mail - a part that would really need to work without bugs, it would be nice if you could include tests with your ne ...Continue Reading

On Apr 2, 2010, at 3:11 PM, Justin J wrote: > > On Apr 2, 2010, at 3:45 PM, Alan Hysinger wrote: >> If a pin is compromised, it's only the one pin. I have observed it is different for each mailing, even for the same email address, so it seems the algorithm generating the pins has some defense against being cracked. > > As the implementor of it, I'd say it's laughably insecure. I'm pretty worried about it, myself. I would like to completely replace it with just a random number, that's saved somewh ...Continue Reading