> > Were you using FormMail.pl from Matt's script archive? > > If you are, it has been updated recently to patch these issues. > > Have they really only just got round to making it secure? This hole > has been around for years. I'd assumed it was fixed a long time ago > and only very old installations of the script had the problem. No > wonder I'm getting so much formmail spam. This Matt has a lot to > answer for!
They finally modified it last summer. About six months after we discovered one of our users had it installed and spammers were abusing it. We modified it and sent the patch to the worldwidemart people. Never heard from them. Six months later they released a similar fix. I just wish they would shut down that site with all the bugging software...
