Is that email address unique to his board account?
Very much doubt it - if this was possible there would have been a lot more complaints about it by now.
Same here. If you're logged in to amazon and you look at something they almost always email you a few days later to remind you that you looked and that you might want to buy it. It's standard practice for them. That's by far the most likely explanation.
Can you post that log entry please?
Code: Select all
176.xxx.xxx.196 - - [01/Oct/2018:13:52:28 +0200] "GET /rhabarber HTTP/2.0" 404 1466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Code: Select all
54.175.74.27 - - [01/Oct/2018:14:05:58 +0200] "GET /rhabarber HTTP/1.1" 404 1502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25"
Code: Select all
CIDR: 54.160.0.0/12
NetName: AMAZON-2011L
J-W43 wrote: ↑Sat Oct 06, 2018 2:05 pm I run a phpBB forum which is standard in that email addresses are hidden except from three administrators.
A member posted on a topic mentioning an unusual product. He has a username that doesn't include his real name and his email address isn't mentioned in any post.
A week later Amazon email him asking whether he wants to buy the product which is hardly ever mentioned on Google or anywhere else.
He naturally thinks that our forum has divulged his email address and Amazon have connected it with the unusual product in his post.
Administrators haven't published his email address so how has Amazon linked it to the post? Coincidence or some clever hacking?
Only last week I upgraded the forum software to 3.2.3. Has phpBB let in Amazon via some loophole?