www.webdeveloper.com
Results 1 to 8 of 8

Thread: FormMail modification?

Hybrid View

  1. #1
    Join Date
    Dec 2002
    Posts
    19

    FormMail modification?

    I have a page that uses a server-side cgi FormMail script, (a Matt's script clone), to email a form to a number of email addresses listed in a hidden Recipients field.

    Is there any way it would be possible to modify it at page level so that if a checkbox is ticked then it adds another email address to the Recipient list.

    Thanks in anticipation,
    Ben

  2. #2
    Join Date
    Jan 2003
    Location
    Aurora, Illinois
    Posts
    7
    maybe yes maybe no. would have to see the script. how about a link?

  3. #3
    Join Date
    Dec 2002
    Posts
    19
    I guess a link would be helpful! The form is at http://www.housesnz.co.nz/form09.html. I am trying to modify it so that when a visitor clicks on the Mortgage checkbox at the bottom, it adds another email address to the recepient list.

    Thanks,
    Ben

  4. #4
    Join Date
    Nov 2002
    Location
    NY, USA
    Posts
    731
    Security Focus put MSA FormMail attacks third in their list of the Top Attacks for the 1st Quarter of 2002. Even Matt no longer recommends his scripts. Although the most popular, they are buggy and insecure.

    Your list of recipients should be set in the script itself. You will need to test the checkbox value and modify your list of recipients in the script (not at the client level). You need to first find a different (better) script, and second upload it to a post so we can help you modify it to suit your needs.
    for(split(//,'))*))91:+9.*4:1A1+9,1))2*:..)))2*:31.-1)4131)1))2*:3)"'))
    {for(ord){$i+=$_&7;grep(vec($s,$i++,1)=1,1..($_>>3)-4);}}print"$s\n";

  5. #5
    Join Date
    Dec 2002
    Posts
    19
    Thanks for that but the script is one provided by my host so I have no access to or control over it. What (more secure) alternatives are there?

    Thanks,
    Ben

  6. #6
    Join Date
    Nov 2002
    Location
    NY, USA
    Posts
    731
    You may want to send a notice to your host then. Since the recipient list can be altered by users, the script can be used to send spam, threatening messages, etc. through the server that are usually untraceable except back to the site and/or host.

    But until then this JavaScript will append a new address.

    myForm.recipient.value += ", new@address.com";
    Last edited by jeffmott; 02-15-2003 at 11:48 AM.
    for(split(//,'))*))91:+9.*4:1A1+9,1))2*:..)))2*:31.-1)4131)1))2*:3)"'))
    {for(ord){$i+=$_&7;grep(vec($s,$i++,1)=1,1..($_>>3)-4);}}print"$s\n";

  7. #7
    Join Date
    Dec 2002
    Posts
    19
    Many thanks for this. I couldn't get it to work with the check boxes but got it working with Yes/No lists which is fine.

    I will advise my host re the security issues of FormMail.

    Thanks again for your help.

    Ben

  8. #8
    celebguy_dv Guest

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
HTML5 Development Center



Recent Articles