I want each system-generated or member-composed message to go only to the recipient's personal email address. If a copy goes to the composer's email it must *not* reveal the intended recipient's personal email. However, the copy that goes to the recipient must have the sender's personal email address so it's possible to reply.
Why do this? I'm replacing an old ASP website that does it that way and have been asked to install the same process on the new site.