RE: [cobalt-users] FormMail Advice

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> Matt gave me this link: http://www.scriptarchive.com/nms.html 
> 
> As for FormMail.pl 1.92, what specifically is wrong security 
> wise in a 
> nutshell? He is asking me what you think the problems are 
> that haven't been addressed.
> 
 If it's newer than the one posted here:
http://groups.google.com/groups?selm=5bd5b7e0.0205102339.5484e7c9%40post
ing.google.com&output=gplain
then it should be called 1.93. If it's 1.92, apparently it's still open
to abuse. 
Jeff has another version 1.92s at ftp://ftp.nobaloney.net/ AFIK, it
hasn't been hacked. 

Personally, I still use a modified version of the old version, but the
recipient is hard coded into it, so any attempt to forge the recipient=
in a URL won't work.

-- 
Dan Kriwitsky