Formaail Security Hole Again!

**Head Guru** · May 29, 2003

We have just removed formail from all the servers again.

It has been exploited again by spammers.

I will update when I know more.

Bill

**surefire** · May 29, 2003

At the risk of overstepping my bounds...

I'd like to put in my two cents to answer the question that other TCH members must be asking:

"What do I do now that my FormMail doesn't work?"

1- Go to Hot Scripts and find a mail script that you can use in place of FormMail.cgi (.pl)

2- Do NOT call it FormMail

3- If at all possible, don't put it in your cgi bin folder

I recommend a PHP script for the following reasons:

>It's free, open source

>It's fast

>It's relatively easy to learn (but not required most times)

If you want a list of PHP form processing scripts to use in place of FormMail, then try this link:

**Head Guru** · May 29, 2003

Surefire -

You beat me to the post.

Interested in moderator's job ?

PM me.

**surefire** · May 29, 2003

Anyone interested in the exact script that I personally use, can get it by going here:

This is a BETA stage program I created for printing out ready-to-use script that you can upload right to your site and start using immediately.

Although I tested it successfully on my own site... I emphasize that this is a BETA version and might need revisions.

Directions:

1- Go to the link

2- Input your site name

3- Input your contact email address

4- Submit the form

5-Copy and paste the code into a php file.

6-Put the file in a NEW folder in your public folders.

7-Change one of your current forms so the html tells it to post to the php file

8-Create a thankyou page and name it thanks.php

9-Put the thanks.php page in your main public folder (public root)

10-The thanks.php file can be normal html but must be named thanks.php unless you want to change the code in the script

Recommended Posts