solspace/craft-express-forms

Spam emails are sent when using dynamic recipients

Closed this issue · 2 comments

Description

When using dynamic recipients, spam emails are still sent to the recipients.

The DynamicRecipientsDecorator::sendEmails() method does not check whether $form->isMarkedAsSpam() is true, but emails all submissions regardless of their spam status.

Steps to reproduce

  1. Enable honeypot spam protection on a form with dynamic recipients
  2. Submit the form with a non-empty honeypot field
  3. See that the submission has been blocked in the control panel, but the spam email has still been sent to the dynamic email address

Additional info

  • Express Forms edition & version: Lite 1.0.4
  • Craft version: 3.3.0.1
  • PHP version: 7.2.19

@mtnorthrop Thanks for this, and very sorry for the delay. We're checking into it now. :)

This will be fixed for Express Forms 1.0.5, available this week.