Tom, You know, I don't know but the way I have mine is this: On the formmail cgi program I have:
@valid_ENV = qw('REMOTE_HOST','REMOTE_ADDR','HTTP_REFERER');
and on my html form I have:
<input type=hidden name="env_report" value="REMOTE_HOST REMOTE_ADDR HTTP_REFERER">
My cgi is not even passable, so I usually get cut and paste forms. I downloaded the formmail program and used their instructions to set up the form. It works, so I'm happy. I don't have the instructions handy, and don't want to search for them, but as I remember it, according to the instructions, there were certain parts that you had to adhere to strictly, in order to prevent spam, etc. the following are the important ones:
$allow_empty_ref = 1; // recommended number = 1
$max_recipients = 2; // recommended at 1 or 2 max, no more
$mailprog = 'SMTP:my mail program';
@referers = qw(my domain);
@allow_mail_to = qw(one or more at my domain plus localhost);
@recipients = ('one or more at my domain plus localhost');
@valid_ENV = qw('REMOTE_HOST','REMOTE_ADDR','HTTP_REFERER');I did what they said and all I know is for right now it works. I know that some of you on this list are especially smart, but please don't check the form on my site to see if you can hack into it.
Instead, I will be most happy to let you crafty, but genious, ones have a copy of this form so you can set it up and test it on your site. If you want a copy of this form, let me know and I can look up the URL (means I will have to check out which CD I moved it to after all), and give it to the list.
Ciao
Jan ---
Cyberspace Publishing wrote:
Just a guess, but wouldn't that change leave the program open for spammers to use? I had to delete nearly 500 meg of bounced email due to an errant FormMail script and I believe one of the cures in newer versions was just that addition.
Changing it to @valid_ENV = qw('REMOTE_HOST','REMOTE_ADDR'); might make it work without the referer, but still leave a couple of checks in place.
Cheers, Tom Fosson
At 10:19 AM 05/28/2003 -0700, you wrote:
Just a thought. On the formmail cgi program that I use it has this:
@valid_ENV = qw('REMOTE_HOST','REMOTE_ADDR','HTTP_REFERER');
If I leave that in the form program, but don't have that part on the actual form on the html page, it could possibly create an error.
If you keep getting errors, you can do this on your formmail program:
@valid_ENV = qw('');
Jan ---
-------- L I F E T I M E W E B H O S T I N G ---------- 1000MB of Web Space - 6000MB Monthly xfer - 100 sub-domains 50 MySQL databases - 500 FTP accounts - 500 POP3 accounts Personal CGI-BIN Directory - Perl, PHP, CGI, Frontpage ext. Control Panel - Shopping Cart - MUCH MORE! $249 ONETIME FEE! http://www.lifetimewebhosting.com/cyberpub
____ • The WDVL Discussion List from WDVL.COM • ____
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED]
To change subscription settings to the wdvltalk digest version:
http://wdvl.internet.com/WDVL/Forum/#sub
________________ http://www.wdvl.com _______________________
You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to %%email.unsub%%
-- http://www.jdvisions.com Web Development and Design
____ • The WDVL Discussion List from WDVL.COM • ____
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED]
To change subscription settings to the wdvltalk digest version:
http://wdvl.internet.com/WDVL/Forum/#sub
________________ http://www.wdvl.com _______________________
You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
