Requests and Methods for attachments in Webmail
-
Hello,
We have Cloudflare in front of our MDaemon email server and when attaching files, it would get blocked sometimes. We are trying to fine tune our bypass and wanted to ask.
What requests or methods does attaching files make other than POST.
we currently only have POST and would like to know if there were other requests/methods we needed to add.
Thank you.
-
Here are a list of HTTP methods used for the different attachment actions based on Theme.

-
Thank you.
-
If I may, would there be anything unique attached to these methods, if any?
Meaning writing and sending would also be a POST. What else would tell MDaemon/Webmail that this is an attachment?
different path for attachments, maybe?
Really appreaciate your help with this.
Thank you.
-
Without a better understanding of the problem or knowing what the cloud flare logs are showing, I'm really just guessing...
Here is some information that might be helpful.
HTTP Methods for File Attachments
| Theme | HTTP Method | Endpoint | Notes |
|--------------|-------------|------------------------------------------------|-----------------------------------|
| Pro | POST | /WorldClientAPI/compose/{id}/attachment | REST API |
| Pro (inline) | POST | /WorldClientAPI/compose/{id}/attachment/inline | For images pasted into editor |
| WorldClient | POST | Form action URL (traditional form post) | Uses Attach action parameter |
| LookOut | POST | Form action URL (traditional form post) | Same as WorldClient |Request Format
All three themes use FormData with the same key naming convention:
// Attachment key format
formData.append("Attachment:0", file0);
formData.append("Attachment:1", file1);
// etc.Delete Attachment
| Theme | HTTP Method | Endpoint |
|---------------------|-------------|--------------------------------------------------------|
| Pro | DELETE | /WorldClientAPI/compose/{id}/attachment/{attachmentId} |
| WorldClient/LookOut | POST | Form action with delete parameter |Endpoints
Pro Theme (REST API):
- POST /WorldClientAPI/compose/{id}/attachment - Upload file
- POST /WorldClientAPI/compose/{id}/attachment/inline - Upload inline image
- DELETE /WorldClientAPI/compose/{id}/attachment/{attachmentId} - Remove attachmentWorldClient/LookOut (Form-based):
- POST to form action URL with Attach=1 parameter - Upload file
- POST to form action URL with delete parameter - Remove attachmentAll uploads use multipart/form-data content type with FormData.