1
Announcements and site development / Re: We were hacked.
« on: 2021-07-16 00:21:03 »Problem with that is the way these kinds of forums are setup in terms of the email capabilities... Sending a mass email to all users tends to send out so many at once that most mail servers automatically end up flagging the server as spam and either don't deliver the email to the address or places it into spam and then future emails also automatically get flagged from the server.
So mass emailing users on large forums tends to require a separate mail server setup so that it can send say x amount of emails per x amount of time, until it's sent out to all users.
On top of this, users can opt out of admin emails too, so this doesn't even guarantee that everyone gets notified. On top of this many users have likely abandoned such account here and no longer care about it at all... and getting an email about the site they'll just opt to flag it as spam or contact admins to delete their account.
In any event, mass emailing a few dozen thousand users can open a can of worms of it's own.
SMF has a built-in Mail Queue system which allows the admin to restrict the total number of emails sent per hour. This just needs to be set to something that is less than the hosting provider's hourly email limit, and then there is no issue. Forums generally allow admins to bypass the user-enabled email opt-out specifically because the admins may need to contact users for things like a security breach. I'm fairly certain that SMF also allows this, although the admins or someone more familiar with SMF would need to confirm this.
Additionally, this is just a recommendation I had. If the people running this forum don't agree then that's fine. I just thought I'd throw my two cents in for how something like this should be handled going forward.