TARGET_EMAIL not limiting recipients

[artlab]

Maybe I am not understanding how this should work, but I thought $TARGET_EMAIL was supposed to limit the domains to which formmail emails could be sent.

Using 8.24, I am able to send a form to anyone. The $TARGET_EMAIL settings make no impact. I can set them to bob@spam.org and then send an email with recipient as my own email, and it goes through no problem

Am I missing something? Could this be a bug? How would I debug?

With the following settings, if I set my recipients in my form to bill@company2.com but have the following formmail settings, I still receive email submissions via the form.
So I allow company.com and bill@company1.com, but I send the form results to bill@company2.com and it works.

$TARGET_EMAIL = array(EMAIL_NAME."@company\.com$",
"^bill@company1\.com$");

[russellr]

Hi,

No, I don't there's a bug in this area.

However, you've obviously tested it so something is going on.

If you subscribe for support, and it turns out to be a bug, we'll refund your money.

I don't think we'll be finding a bug in FormMail, though.

In any case, you get the problem solved.

[Maverick]

I'm having the same result. A simple 1 text field form asking for an email address with the recipients defined in the ini file.

I can send email to any address and i can even leave TARGET_EMAIL as '' (nothing) and all i get is a warning and the email is still sent to the recipient i defined in the ini file.

This is the warning:
The following potential problems were found in your configuration:
Warning: Your TARGET_EMAIL pattern "" is missing a ^ at the beginning.
Warning: Your TARGET_EMAIL pattern "" is missing a $ at the end.

These are not necessarily errors, but you should review the documentation inside formmail.php. If you are sure your configuration is correct you can disable the above messages by changing the CONFIG_CHECK settings.

Is the ini file "recipients" field supposed to override the target emails?

[russellr]

Hi,

If you're using an INI file, then you are correct to clear out the value of $TARGET_EMAIL.

The right way to do this is:

$TARGET_EMAIL = array();

[Maverick]

Ok thanks for clarifying Russel.

It did seem a bit redundant however since i read that the setting was mandatory i have always set both.