[pmwiki-users] Harvesting :Email: text variable in Profiles for spamming friends

[Hans]

Tuesday, June 24, 2008, 3:08:40 PM, kirpi at kirpi.it wrote:

> [[#includeEmail]]
> (:include {=$FullName}{$:Email}:)
> [[#includeEmail]]
> (:pagelist group=Profiles fmt=includeEmail:)

try this instead:

!!!email list
(:pagelist group=Profiles $:Email=- list=normal fmt=#includeEmail:)

(:if false:)
[[#includeEmail]]
(:template first:)
||width=30em
(:template each:)
||[[Profiles/{=$Name}]] ||{{=$FullName}$:Email} ||
[[#includeEmailend]]
(:if:)


Note the bracketing of the PTV.

{Group.Name$:Email} will include the value of PTV 'Email' from page
Group.Name

In the pagelist template Group.Name is replaced by {=$FullName}

$:Email=- in the directive will filter the pages to thos ewhich
contain a non-empty PTV 'Email'.

(:if false:) hides the pagelist template (a better method is to move
it to Site.LocalTemplates.

fmt=#includeEmail calls the format. It needs the # to refer to the
anchored section.



  ~Hans