[Jafo232]

Originally Posted by AN-net

possible security problem...could someone with malicious intent fake the domain from which the emails come from. giving an authorized person access to post on your forums what ever content they want. i remember some at vb.com telling me that using a domain from an email came from is unreliable since it can be easily modified. it was for my suggestion on alternative to email confirmations but them sending emails to confirm themselves.

Yes of course, which is why you must keep the mailbox secret so only google (and yourself) knows the email address.

You could also setup something in say Spamassassin that will verify email comes from where it says it comes from, but to me that seems to be a bit overkill.

The content posted, can only be posted in the forum you choose. No user can actually spoof the identity as far as logging in and changing anything.

Is it 100% secure? No. Can anything malicous be done with it? I doubt it. If you are really worried about it, set the user so everything they post is moderated.