[cobalt-users] Re:formmail replacement

[Charlie Summers <charlie@xxxxxxxxxx>]

At 12:21 PM -0400 8/17/03, David Lucas is rumored to have typed:

> what script do people use instead of formmail by Matt?

   It is _really_ trivial to write your own in PHP, one that hard-codes the target address (not making it open to everyone in the source), forces a check on the POSTed or GETted (ugh) variables, etc. Sending the mail is as simple as using the mail() function. It's so easy to write one from scratch for each specific application that I've stopped using CGIs completely.

   You _can_ work around the original security issues with replacements or updates, but it's really easy (even for the weekend programmer) to write a simple custom form handler in PHP; spend a few moments at the documentation (www.php.net) and I think you'll be surprised at how easy it is to have a completely secure form.

         Charlie