Most email service providers have a limit on bouncebacks to prevent spam and email abuse.
Amazon SES for example will suspend SES services on the Amazon account if too many bouncebacks occur.
Once a customer is logged in, the current share page can easily be abused/exploited by sending repeat emails to invalid email addresses which would eventually hit SES bounce limits and suspend email services for the entire account. This can cause the entire website to not send emails until Amazon uplifts the suspension.
Adding configurable customer limit(s) such as a daily customer limit (per customer) on sending emails using the share page as well as maybe a captcha code to prevent scripts/bots from auto-submitting the form would be a great security enhancement/optimization for the plugin 👍
Open
Last updated: May 18, 2020
0 comments
Log in to comment on this feature request.