[Mailman-Users] Question Regarding admindb

[claw at kanga.nu]

On Wed, 01 Dec 1999 16:37:51 +1100 
Gonzalo Servat <speedy at WebBios.com.au> wrote:

> It would be quite easy for anyone to send spam to the list, then
> guess the URL of the approval page (since its usually
> www.domain.com/admindb/<listname> and approve it themselves since
> no password is required.

A password is required unless you already have a cookie from a
previous authentication (which hasn't timed out yet).

-- 
J C Lawrence                                 Home: claw at kanga.nu
----------(*)                              Other: coder at kanga.nu
--=| A man is as sane as he is dangerous to his environment |=--