open https://gitlab.synchro.net/main/sbbs/-/issues/508

When using Nightfox's login matrix I went to send an email to sysop and found that an email by a previous guest was still hanging around. This could be abused by two users wishing to exchange messages by way of logging in, leaving a message and then dropping the call and another one dialing in to pick it up.

Also, since guest is user 0000 then if it's using 0000.draft.mail.msg then two guests could possibly be creating the same draft message.

I propose that guest messages are checked and deleted before a new message is sent and that appending the node number to the filename will stop guests stomping on each others messages.

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

https://gitlab.synchro.net/main/sbbs/-/issues/508#note_3172

I don't think this is specific to my login matrix. From what I remember, this is a standard feature of Synchronet allowing a user to resume editing a message in case that user had been disconnected.

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

https://gitlab.synchro.net/main/sbbs/-/issues/508#note_3173

Resume editing a post is fine, but not as a guest user, for reasons detailed above and more. Especially if user is inputting personal information for password recovery purposes. A guest should never be able to recover another guests posts.

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

https://gitlab.synchro.net/main/sbbs/-/issues/508#note_3175

User #0 is not guest (it's "no one"). This is still an issue, but not related to draft messages from guest accounts, which I believe are already auto-ignored/purged/not-saved, but I'll confirm that too.

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

https://gitlab.synchro.net/main/sbbs/-/issues/508#note_3176

Yes, you're right, my bad on the user 0. I guess before someone logs into the login matrix they are "no one" so any email to sysop is going to be written to the user 0 temp file.

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

close https://gitlab.synchro.net/main/sbbs/-/issues/508

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net