PDA

View Full Version : Send Securely ??



ideavirus
May 21st, 2002, 12:03
Hii,

I have a webform....users after filling it up..should be sent to a predetermined mail in a SECURE MODE !!! .

As for the script, i might use matt's FormMail...but, how can i achieve this secure mode...??

Thanks for any help..???

:)

is0lized
May 21st, 2002, 15:14
https:// :biggrin2:

cheatpark
May 21st, 2002, 17:37
The server must have a secure socket layer though.

is0lized
May 21st, 2002, 18:19
i would NEVER send my credit card info thru anything but https:// and anyone i dont trust

meow
May 21st, 2002, 22:26
Rumor has it that nothing is secure with Matt's FormMail. Great for spammers and bad for your bandwidth. Don't use it.

ideavirus
May 21st, 2002, 22:45
Hii,

Thanks for your replies !

Okay, How do get this https:// thingy..?? Guess, my host has to support SSL ???

meow, Okay, which form do you suggest me to use, if not for formmail...??...

Thanks again..
:)

meow
May 21st, 2002, 23:06
These guys have taken upon themselves top write replacements for Matt's crappy scripts and from what I hear with excellent result. I'm to dumb to judge for myself but I listen to those that are smarter. ;)

http://london.pm.org/ (for info)
http://nms-cgi.sourceforge.net/ ( scripts here)

FYI The current Formmail at Matt's archive isn't the old super insecure one but a newer one written by others than Matt but I understand that it's still crap. They say that old formmail script is responsible for most of the cases when a script gets hijacked and used to relay spam. I don't dare to go near it. :biggrin2:

ideavirus
May 22nd, 2002, 00:10
meow :

Thanks again for the suggestions.
I will go through them now and get back here !

Also, anyone who can help me with SSL a bit here. How do i get it to work???

thanks again
:)

meow
May 22nd, 2002, 00:20
I could be wrong but I think that part depends totally on your host (guess you are on a virtual account). I've only used it once and it wasn't on my own account, but there was a secure directory enabled by the host and anything we put there was secure.

ideavirus
May 22nd, 2002, 11:06
hii meow,

On the nms page, you mention, they have a formmail...!

Is that different from the one avaliable at MSA ( matts ) or is it the same one..!

thanks again
:)

meow
May 22nd, 2002, 11:48
Yes, that's the whole point. They want to offer scripts with the same functionality as Matt's (because they are popular and widely spread) but up to date and secure.

Guess it's some kind of community thing - they want to free the world of Matt's scripts. It's all explained on their page(s). I visited Matt's and saw that he links to NMS now and explains himself that his scripts aren't the best around. :p

As said, I can't check a Perl script for security holes, but from what I've heard...;)

ideavirus
May 22nd, 2002, 12:17
Thanks for the clarification meow :

So, I understand that the formmail script avaliable at nms site is similiar in functionality to the one at MSA, but is much better ( in terms of security ) than its counterpart at MSA..?

:)

meow
May 22nd, 2002, 14:06
Yes, so I'm told. There are probably a lot of good scripts around but that site seems like a neat resource for dummies (referring to myself - I'm no programmer :o).

hawkman2
May 23rd, 2002, 15:12
SSL stuff....

http://softwaredev.earthweb.com/servdev/article/0,,12111_620071,00.html

ideavirus
May 24th, 2002, 00:43
hawkman2 :

warm welcome to FWS !

Thanks for the pointer. But the page you gave me, tell me about implementing SSL on IIS. Thing is I am on apache, is it the same. I guess, its obviously different.

Okay, the cert is already installed. But i don't have any zone wherein, I can place the pages which i want to be sucre??

Instead. I get a long URL, with my host URL also in it. Is that how it is implemented. Or can i still get a zone where, i place my secure pages, and have my own domain friendly(compatible) url...basically, to retain the consistency !

Thanks
:)