[cobalt-users] Dodgy formmail.pl?

["Joe Quinn" <joe@xxxxxxxxxx>]

Hi,

Just having a look around the various sites on the server after seeing a
posting about formmail and found this one that looks a bit dodgy as there
isn't a referrer field. Could anyone please comment, should I disable this?
What about chmod 777 to one of the files?

>>>
[root@raq1 /]# more /home/sites/site64/web/cgi-bin/formmail.pl
#!/usr/bin/perl
# ^-------------- Change this to your path to PERL
#
# Copyright © 1998 Ilia Mirkin & Ben Congleton / Nethernet.
(http://www.nethernet.com)
#
# This script can be destributed for free as long as the header remains the
same..
# and the user-site provides a link to Nethernet.com.
#
# if you use Nethern-Mail We would appreciate it if you mailed
# root@xxxxxxxxxxxxx so we can point to you on our examples page
#
###################################################################
# Simple Install Instructions:
#
# 1) Modify the variables, and add the default sender, redir and
#     path to your sendmail program, upload this CGI and chmod it 755
#
# 2) Create a form you would like users to fill out and set
#                      <FORM method=POST action="address of this CGI">
#
# 3) If you are using this CGI for multiple users you can specify who
#    the message should be sent to by adding a
#                <input type=hidden name="to"
value="your-email@xxxxxxxxxxx">
#                <input type=hidden name="redir"
value="http://www.thankspageURL";>
#
# 4) And that is it unless you want to log every sent mail (usefull when you
have
#    Multiple users using the form)
#
# 5) If you are logging the send mails, you should create a file called
log.txt and chmod it #    777
#    And then you will be done :-)
#
# 6) Add a link to our site on your webpage :-)  and have fun :-)
#
###################################################################
# Variables:
#
# Default E-mail to send the mail to:  (you must use '\' in front of the '@'
sign
$yourmail="form\@domain.co.uk";
# Default URL to redirect to after a sent message:
$yourredir='http://www.domain.com/map';
# Url to send the user to if they don't access the page using a POST
$redd='http://www.domain.com';

# Sort method ( 1 = The order of the fields on the original form, 2 =
Alphabetically, 3 = random :-)
$sort=1;


##################
<snip>

Cheers,

Joe