[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re[2]: [cobalt-developers] HTML mail



Hello Jeff,

Donnerstag, 13 April 00, you wrote:

JL> I use FormMail.pl from Matt's script archives.

JL> For an exmaple, look at "www.allyfarson.com/html/mainpage.html";
JL> download the source and look for "FormMail.pl".

JL> Jeff

>> Muhammad Asif wrote:
>> 
>> hi,
>> i need yr help in following case. I Hope u will guide me.
>> Let my mail application support HTML mail.
>> I want to send a mail to myself which is an html form.
>> On submitting this form i want to call an action page that

I I tried Formmail Version 1997... but got the error:
"The Server is not allowed...., register server in the server variable."
I did ,using IP,Domainname and Host.Domainname, but could not get it to work.
( I can't remember, mayby I setup the script as USER httpd ,because I had the 32 User
 problem to workaround.)

Fact is many FREE CGI FORMMAIL SCRIPTS have the simple OPEN() command with
a pipe to Mail/sendmail, witch will allowing a Hacker to trick your mailprg. into sending
files (PW) back to them.
One trick is to send/create a faulty Email with an appended commandline that calls the file.
All the info is send back to the hacker as an error message .
Check .... and try to understand exactly what the FREEMAIL SCRIPTS are doing.
:-)

Best regards,
 Tapuio                            mailto:mrlove@xxxxxx