# Date mismatch on staged user

**URL:** https://meta.discourse.org/t/date-mismatch-on-staged-user/412726
**Category:** Support
**Tags:** staged-users
**Created:** [September 18, 2026, 1:58am UTC](https://meta.discourse.org/t/date-mismatch-on-staged-user/412726 "2026-09-18T01:58:30Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![one1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/one1/32/493591_2.png) [@one1](https://meta.discourse.org/u/one1)
#### Post date: [September 18, 2026, 1:58am UTC](https://meta.discourse.org/t/date-mismatch-on-staged-user/412726/1 "2026-09-18T01:58:30Z")

</div>

We just got a direct email message to the forum. (obvious spam). The strange thing is that the date of the PM is 11 days ago:

 ![2026-09-18 07_20_19-screenshot](https://global.discourse-cdn.com/meta/original/4X/2/c/1/2c1a5f94a588aa079e802b8751fee2b5f7510e26.png)

However the staged user is dated as created today (“Joined 4 Hours”):

 ![2026-09-18 07_21_38-screenshot](https://global.discourse-cdn.com/meta/original/4X/d/1/8/d183f4d75c2be91ff370fe264d2e4ebd4748479f.png)

Any idea what is going on?

I’m hoping that Discourse is not allowing spammers to back date messages. The official date for the message should be the date it is created.

---

<div class="post-metadata">

### Author: ![nat](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nat/32/235063_2.png) [@nat](https://meta.discourse.org/u/nat)
#### Post date: [September 18, 2026, 3:27am UTC](https://meta.discourse.org/t/date-mismatch-on-staged-user/412726/2 "2026-09-18T03:27:26Z")

</div>

We use the incoming email’s `Date` header to date the post, while the staged user is created when the email is processed. An email dated 11 days ago but processed today could explain this mismatch (could..).

We cap future dates at the current time, but preserve older dates. So yes, the sender can supply an older date, though we’d need to check this email’s headers to confirm what happened here.

Could you check the original email’s `Date` and `Received` headers? That should help distinguish an older sender-supplied date from delayed delivery. You should be able to click the ✉ button to see quite a bit of details.

---

<div class="post-metadata">

### Author: ![one1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/one1/32/493591_2.png) [@one1](https://meta.discourse.org/u/one1)
#### Post date: [September 18, 2026, 4:14am UTC](https://meta.discourse.org/t/date-mismatch-on-staged-user/412726/3 "2026-09-18T04:14:32Z")

</div>

I think this is what you are asking for:

```plaintext
Received: from vps.f3host.com (vps.f3host.com [xxxxxxx])
	by discourse-mail-receiver.localdomain (Postfix) with ESMTPS id xxxxxxxxxxxxx
	for <support@ourdomain.net>; Thu, 17 Sep 2026 22:21:39 +0000 (UTC)
...
Date: Mon, 7 Sep 2026 01:01:36 +0100

```

So it was received today but the date is 11 days ago.

I don’t see any benefit to the interface showing the date that the sender put in the header. Since direct emails are often spam, it feels like they should be given very little control over things. Spoofing a date feels like it could only be malicious.

Since you already prevent future dates, is there a reason we couldn’t just put the creation date for the post as the date that the post is actually created?