Requests and Methods for attachments in Webmail

• A

  Allen

  1/26/26, 9:23 AM

  Hello,

  We have Cloudflare in front of our MDaemon email server and when attaching files, it would get blocked sometimes. We are trying to fine tune our bypass and wanted to ask.

  What requests or methods does attaching files make other than POST.

  we currently only have POST and would like to know if there were other requests/methods we needed to add.

  Thank you.

  0 likes 0 likes Liked Like

  ---

  5
  Posts

  161
  Views

  Reply

  ---

• A

  Arron Admin Staff

  1/26/26, 9:51 AM

  Here are a list of HTTP methods used for the different attachment actions based on Theme.

  

  --
  Arron Caruth

  0 likes 0 likes Liked Like

  ---

• A

  Allen

  1/26/26, 11:27 AM

  Thank you.

  0 likes 0 likes Liked Like

  ---

• A

  Allen

  1/26/26, 11:41 AM

  If I may, would there be anything unique attached to these methods, if any?

  Meaning writing and sending would also be a POST. What else would tell MDaemon/Webmail that this is an attachment?

  different path for attachments, maybe?

  Really appreaciate your help with this.

  Thank you.

  0 likes 0 likes Liked Like

  ---

• A

  Arron Admin Staff

  1/26/26, 12:20 PM

  Without a better understanding of the problem or knowing what the cloud flare logs are showing, I'm really just guessing...  

  Here is some information that might be helpful.

    HTTP Methods for File Attachments

    | Theme        | HTTP Method | Endpoint                                       | Notes                             |
    |--------------|-------------|------------------------------------------------|-----------------------------------|
    | Pro              | POST        | /WorldClientAPI/compose/{id}/attachment        | REST API                              |
    | Pro (inline)  | POST        | /WorldClientAPI/compose/{id}/attachment/inline | For images pasted into editor     |
    | WorldClient | POST        | Form action URL (traditional form post)        | Uses Attach action parameter      |
    | LookOut      | POST        | Form action URL (traditional form post)        | Same as WorldClient               |

    Request Format

    All three themes use FormData with the same key naming convention:

    // Attachment key format
    formData.append("Attachment:0", file0);
    formData.append("Attachment:1", file1);
    // etc.

    Delete Attachment

    | Theme               | HTTP Method | Endpoint                                               |
    |---------------------|-------------|--------------------------------------------------------|
    | Pro                 | DELETE      | /WorldClientAPI/compose/{id}/attachment/{attachmentId} |
    | WorldClient/LookOut | POST        | Form action with delete parameter                      |

    Endpoints

    Pro Theme (REST API):
    - POST /WorldClientAPI/compose/{id}/attachment - Upload file
    - POST /WorldClientAPI/compose/{id}/attachment/inline - Upload inline image
    - DELETE /WorldClientAPI/compose/{id}/attachment/{attachmentId} - Remove attachment

    WorldClient/LookOut (Form-based):
    - POST to form action URL with Attach=1 parameter - Upload file
    - POST to form action URL with delete parameter - Remove attachment

    All uploads use multipart/form-data content type with FormData.

  --
  Arron Caruth

  0 likes 0 likes Liked Like

  ---