great mod, but I can not find information how user can define himself by mail...
This plugin use email address to know "user login"? I mean "to know who wrote by mail" ?
If yes, it's not secure, because anybody can send letters from any email address. I mean i can send email from support @ microsoft [dot] com etc.
email is WRONG choose to define user. So it's loophole for spammers....
p.s. sorry for my english.
|