DOC Add admin_email config recommendation to 4.9.0 upgrade (#10212)

* Add admin_email config recommendation to 4.9.0 upgrade

* add missing header
This commit is contained in:
Andrew Paxley 2022-01-27 14:06:17 +13:00 committed by GitHub
parent c74f368bf4
commit 83156dd9c9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -238,7 +238,8 @@ Review the [Functional Testing developer documentation](/developer_guides/testin
Silverstripe CMS provides an API over the top of the [SwiftMailer](http://swiftmailer.org/) PHP library which comes with an extensive list of "transports" for sending mail via different services. Silverstripe CMS 4.9.0 upgrades to Swiftmailer version 6 from version 5.
#### Moving away from _Swift_MailTransport_
#### Moving away from Swift_MailTransport
Prior to 4.9.0, Silverstripe CMS 4 defaulted to using the built-in PHP `mail()` command via a deprecated class `Swift_MailTransport`. However, the Swiftmailer maintainers have decided to remove this class because of some inherent security flaw in the way the PHP mail function handles the `from` header.
Read this [GitHub comment by a SwiftMailer maintainer](https://github.com/swiftmailer/swiftmailer/issues/866#issuecomment-289291228) for a detailed explanation of the weakness of the PHP mail function.
@ -249,6 +250,8 @@ New Silverstripe CMS project created from `silverstripe/installer` 4.9.0 or grea
It's highly recommended that existing Silverstripe CMS installation using `Swift_MailTransport` upgrade to `Swift_SendmailTransport` or another available transport, such as `Swift_SmtpTransport`. Details on how to use these classes are available in the [email section](https://docs.silverstripe.org/en/4/developer_guides/email/) of the developer docs.
It is also crucial to ensure that you have a `From:` address properly configured, as changing from `mail()` to `sendmail` will mean that any existing fallback configuration will no longer apply. You can [set this in your yaml config](https://docs.silverstripe.org/en/4/developer_guides/email/#administrator-emails) which will mean that password reset emails and others continue to send.
### Other new features
* [New title tip component](https://silverstripe.github.io/silverstripe-pattern-lib/?knob-Content=Example%20tip%20contents&selectedKind=Admin%2FTip&selectedStory=Title%20tip&full=0&addons=1&stories=1&panelRight=0&addonPanel=storybook%2Fnotes%2Fpanel) allowing you to provide extra context on the purpose of a field