Welcome to the club :)  Many of us have been hit by that one.
Other than extensive code to error check it, which we have done (we did this
at the ARSYSTEM_Email_Messages form, instead of everywhere we allowed an
email address)...
I believe it was also suggested that creating a dummy user of "0", would
prevent it from getting to the Group evaluation.
You might want to check the archives, I know this has had a bit of
discussion in the past.
 
Mark

  _____  

From: Action Request System discussion list(ARSList)
[mailto:[EMAIL PROTECTED] On Behalf Of Frank Caruso
Sent: Monday, December 01, 2008 1:39 PM
To: [email protected]
Subject: Sending Emails to Groups


** ARS 6.3p20 Solaris/Sybase

One of our users was able to bring our Remedy server to its knees over the
weekend.  They put "0" for a value in a field that was expecting one or more
email addresses. After some hunting I was able to figure out that Remedy
took this to mean the Public group and sent an email to every user
registered with our Remedy server. This turned out to be 1000's of emails.
It looks like Remedy translates the Public group and then creates an
outgoing email for each email address in the User form.

I thought I could easily block this from happening by making sure the value
in this field contained something that looked like an email address
(contained a "@") but users could do something like "[EMAIL PROTECTED], 0,
[EMAIL PROTECTED]". Also, there are many fields throughout the application
that allow a free-typed value (not a good idea but it is what I am stuck
with) so I would have to build a lot of work flow.

I was wondering if there was something that could be done to stop Remedy
from translating values to Groups or a way of catching this happening during
email processing?

Thank you

Frank
__Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
html___ 

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"

Reply via email to