Malicious code in Atlas

[farangkao]

Just an Idea, until ZOS fixes this ,we could write an Addon that is preventing this,
by redefing the Function used to send automatic mail.

So anyone who installed that Addon will not have to worry about it.

It may however break some useful auto-mailer addons if installed (are there such addons?).

But then if an Addon author is using that function in his code, it should be detected if possible
directly by ESOUI.com, because if someone is using functions like that he might also try other tricks not yet known by the community.

[mattmillus]

Writing an addon to prevent this is technologically impossible. Addon load order is not guaranteed, and there is no manifest option to force a load before all other addons.

[Sasky]

Originally Posted by mattmillus Writing an addon to prevent this is technologically impossible. Addon load order is not guaranteed, and there is no manifest option to force a load before all other addons.

Yeah, it's not even possible to guarantee that your addon's loaded. Consider that you can automatically disable addons from code (see http://www.esoui.com/downloads/info4...nProfiles.html for one example). So a malicious addon could just disable your addon if it's there, which would preempt any attempts to guard the send or attach functions.

Simply put, it's something that ZOS needs to do, because they can have private functions that addons can't touch.

[Sasky]

1.5.8 patch notes:

UI Mail You will now receive a confirmation box when sending mail that includes an attached item or gold.

[Baertram]

I hope the mail return bots still work with this "confirmation box"

[Garkin]

Originally Posted by Sasky 1.5.8 patch notes:

There is a new event:
EVENT_CONFIRM_SEND_MAIL (to, subject, body, numAttachments, attachedMoney)

And new private function:
ConfirmSendMail(to, subject, body)