1
I have put a small hack into Contact Us.
I have added a $toEmail value here
extract($HTTP_POST_VARS);
$myts =& MyTextSanitizer::getInstance();
$toEmail = $myts->stripSlashesGPC($toEmail);
and changed the line
$xoopsMailer->setToEmails(function--> admin email)
to $xoopsMailer->setToEmails($toEmail);
This enables me to send the email address for the contact form through $HTTP_POST_VARS.
I used this with a heavily modified template for userinfo.php which contained a form. The form's toEmail field is a hidden field which contains
.
Thus, every member who shows their email address has a contact form... and by deleting the default email field, this is without actually revealing their email address to anyone!
Enjoy.
Simon
