Now some visitors are contacting me asking why they have received confirmation of a new comment to their mails regarding another visitors comment.
When i look at the info in these mails the author email is mumbo jumbo and notify is set to yes. So it seems that when someone comments using a phony email the confirmation somehow ends up in another commenting visitors inbox. My users are now questioning the security of my site.
