The mailing list for listmasters using Sympa

[Hugo <address@concealed>]

After sending 'subscribe perl-friends address@concealed' to a sympa
server from the address address@concealed, sympa sent this message:

  Someone (hopefully you) asked for your e-mail address
  to be added to list 'perl-friends'.
  If you want this action to be taken, please

  - reply to this mail
  OR
  - send a message to address@concealed with subject
   auth d9cd694d sub perl-friends address@concealed
  OR
  - hit the following mailto 
mailto:address@concealedaddress@concealed

  If you do not want this action to be taken, you can safely ignore
  this message.

.. which is fine. However it sent it to address@concealed, not to
address@concealed, rather defeating the point of the auth message.
(Worse, it sent to the _sender_ of the original message, ignoring also
the Reply-to: field.)

Looking at sympa-2.5.2, I think the error is in src/Commands.pm, and
should possibly change as in the attached patch; I'm not sure whether
the '$which' address needs more validation before this is safe, though.

Hugo
--- src/Commands.pm.old Tue Feb 15 08:44:29 2000
+++ src/Commands.pm     Tue Mar  7 17:13:25 2000
@@ -541,7 +541,7 @@
        return 1;
     }
     if ($action =~ /request_auth/i) {
-      List::request_auth ($sender,'sub',$which,$comment );
+      List::request_auth ($which,'sub',$which,$comment );
        do_log('info', 'SUB %s from %s authentified (%d seconds)', $which, 
$sender,time-$time_command);
        return 1;
     }