TEST_PASSWORD Setting

HOOK_DIR Index

This page documents the TEST_PASSWORD configuration setting in FormMail.

Type Of Setting

TEST_PASSWORD is an OPTIONAL setting, which means...

OPTIONAL : you can change this setting if you need to, but the default value is fine for most circumstances.

Précis

Password for testalert.

Description

After 20 years of FormMail, in 2021 we started to get reports of attackers using "testalert" to annoy FormMail users.

From version 9.25 of FormMail, we've added this TEST_PASSWORD setting so you can change the default value of "1" to a password that only you know. And that will stop attackers from annoying you.

The "testalert" feature is a quick way to check that your server can send email to you. See solving email problems for more details.

If you start seeing a lot of test messages from your copy of FormMail that you did not initiate, then you can change this setting to completely prevent them.

For example, if you set TEST_PASSWORD to "MyDogHasFleas42", you would need to run "testalert" as follows:

http://www.your-site.com/formmail.php?testalert=MyDogHasFleas42

Default Value

$TEST_PASSWORD = "1";

Examples

$TEST_PASSWORD = "MySecretPassword";