Hi Takayuki,
Very glad you found the feedback useful. I also found some great documentation of yours at:
* http://contactform7.com/configuration-errors/
* http://contactform7.com/best-practice-to-set-up-mail/
I finally think I should have done some more research. My questions would have mostly been answered.
However, adding a small section in the FAQ about the aforementioned concerns and linking to it from the warning message regarding the non-validated contact forms would still be nice.
BTW, I played with this feature a bit and I think it’s great and every validation makes perfect sense!
My only suggestion would be to add a filter based switch like the following:
add_filter( 'wpcf7_validate__relaxed_from_email', '__return_true' );
which would make the rule, which checks if the email address that has been added to the From field belongs to the exact domain of the web site, a little more relaxed by allowing email addresses the domain part of which is a parent domain of that of the web site’s.
I’m sure I could have phrased the above better, so here is an example to make it more clear: provided that the above filter is set to True, if the web site’s domain is blog.example.com or test1.demo.example.com, the validator could allow an email address of the form user@example.com in the From field, but not an email address of the form user@example.net.
For instance, in case of a multi-site installation, in which each sub-site is operated by different people, the current strict validation rule makes *perfect* sense, because in such a case all sub-domains should have separate MX records in the DNS zone, which usually translates to different mailboxes.
But, in case all the sub-sites are operated by a single person (happens some times), chances are that there are not separate MX records for each sub-domain, but the same email address and mailbox are used for all sub-sites, which is the expected thing in almost all such cases.
On the contrary, with the current strict validation rule in that latter case the multi-site operator, in order to be able to use the same mailbox for all sub-sites, would have to add an MX record and also an email alias (user@sub-site-N.example.com address pointing to user@example.com) for *each* sub-domain. Most of the time people won’t like having so many valid email addresses around as it could lead to receiving more spam.
By supporting a switch like the one above, the validation rule could become a little relaxed with this so as to cover these cases.
I hope I am not missing anything in all the above. 🙂
In any case I think the implementation of the validation is excellent and I hereby take back my suggestion to make it an on-demand feature. 🙂
Best Regards,
George
