即使没有密码，smtp也会发送邮件 [英] smtp sending mail even without password

问题描述

我写这个代码发送邮件它完美的工作，但我发现了一些非常危险的东西，它发送邮件给人们，即使我不提供我的密码，我在信用卡中输入而不是密码，它的工作原理是什么？

i wrote this code to send mail it works perfectly but i detected something very dangerous, it sends mail to people even if i don't provide my PASSWORD, i ony put "" instead of password in creditentials and it works why ?

SmtpServer.Credentials = new System.Net.NetworkCredential(txtEmailFrom, "");
SmtpClient SmtpServer = new SmtpClient("[DELETED].pk");
                var mail = new MailMessage();
                mail.From = new MailAddress(txtEmailFrom);

                string[] to = txtEmailTo.Split(';');
                foreach (string mailTo in to)
                {
                    mail.To.Add(mailTo);
                }

                string[] cc = txtCC.Split(';');
                foreach (string copyTo in cc) 
                {
                    MailAddress cCopy = new MailAddress(txtCC);
                    mail.CC.Add(copyTo);
                } 
                mail.Subject = txtSubject;
                mail.IsBodyHtml = true;
               // mail.CC = txtCC;
                string htmlBody;
                htmlBody = txtBody;
                mail.Body = txtBody;
                SmtpServer.Port = 25;
                SmtpServer.UseDefaultCredentials = false;
                SmtpServer.Credentials = new System.Net.NetworkCredential(txtEmailFrom, "");
                SmtpServer.EnableSsl = false;
               
			
	
	     try {
                SmtpServer.Send(mail);
                ViewBag.Confirmation = "Daily Log Has Been Submitted";
                return View();
             }
         
         catch (Exception ex) 
             {
               ViewBag.Confirmation = ex.Message;
               return View();
  	         }
      }

删除打开的电子邮件服务器地址 - OriginalGriff [/ edit]

[edit]Open email server address removed - OriginalGriff[/edit]

推荐答案

因为您的电子邮件服务器配置为不需要凭据。

这是一个非常糟糕的想法 - 几乎与发布服务器地址一样差 - 并且我强烈建议您让管理员尽快修复它。

Because your Email server is configured to not require credentials.
This is a very poor idea - almost as poor as publishing the server address - and I would strongly recommend you get your admin to fix it ASAP.

这篇关于即使没有密码，smtp也会发送邮件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！