>I came across the following (I am not if this is a problem though):
>
>I use West Wind wwipstuff.dll and wwipstuff.vcx for emailing. When emailing through an SMTP host that requires authentication, the password works even if it is a wrong password.
>
>Here is an example:
>
>Say the user name is MYNAME and password is MYPASS. If I set the value of password to the wwipstuff object that starts with correct password (MYPASS) and add any characters at the end, the email will go through.
>
>The code that assigns the user name and password is as follows:
>
>

>owwEmail.cMailServer  = pcPageSmtpName
>owwEmail.cSenderEmail = pcPageSenderEmail
>owwEmail.cSenderName  = pcPageSenderName
>owwEmail.cUsername = pcPageUserName
>owwEmail.cPassword = pcPageUserPassword
>

>
>So if in the above the pcPageUserPassword is MYPASS1 or MYPASSXYZ it will work.
>
>What am I missing?

I'm guessing that you don't actually need to authenticate to send. Are you sure that you do?

Rick's stuff is great but even he hasn't managed to come up with a mail class that can defeat authentication out of the box! :)