PDA

View Full Version : formail



ln
August 12th, 2002, 00:35
A friend of mine tells me he uses this formail script
# FormMail Version 1.6 #
# Copyright 1995-1997 Matt Wright mattw@worldwidemart.com #
# Created 06/09/95 Last Modified 05/02/97
found here (http://www.allhtml.com/perl/perl475.php), as is.

Is it vulnerable to spammers (hijacking the script) ? I told him it might be.

Noldar
August 13th, 2002, 11:24
Yes, that script is vulnerable. You might want to take a look at the formail script available at this site http://nms-cgi.sourceforge.net/

Richard

Blank Verse
August 14th, 2002, 17:09
what exactly is in your forms? If it's nothing too important, then I'd use that, cause it's simple and does the job

ln
August 14th, 2002, 23:47
uh ? I don't understand your question

Canuckkev
August 15th, 2002, 00:22
If you do use a formmail script, rename the file to something other than "formmail.pl". Bots randomly go out to "http://randomdomain.com/cgi-bin/formmail.pl", and try to send mail. Something to think about.