[wellylug] FormMail

[Jethro Carr]

On Thu, 2007-01-25 at 20:46 +1300, Michael Dittmer wrote:
> Hi All
> 
> I have a formmail script on a website (running on a linux box in a 
> shared hosting environment) that when you press the submit button it 
> emails the address in the script. Up to this point in time the script 
> has worked fine, however I need to make changes to the script so that 
> when a person enters their email address in the necessary field they 
> also get a copy of the email sent.
> 
> The code I believe that needs changing is below, however I can provide a 
> link to the entire FormMail.pl script file. I currently haven't 
> developed the HTML form that the script gets info from as I have only 
> been asked about the change this afternoon.

just a word of warning,

(You've probably already thought of this, but just-in-case)


make sure you use some means to prevent spammers from using it to relay
spam to people - a spammer could write a program to submit the content
they want, and supply addresses in the BCC field to get those addresses
spammed.

You want to limit the number of BCC addresses to 1. You should also put
in a random human test (eg: what is this a picture of?) to prevent spam
bots just repeatedly calling the page with a different address.


-- 
Jethro Carr

www.jethrocarr.com
www.jethrocarr.com/index.php?page=cv/cv.php
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.wellylug.org.nz/pipermail/wellylug/attachments/20070125/ba80d701/attachment.pgp