Re: Mailto: Forms

Hello there,
    Thought I'd give you two, Jon and Gary, an update. I have used the NMS
script having been alerted to the security breaches in Matt's on this list.
And the redirect using a CGI script is also something I've done before. My
problem was/is that these people do not have a CGI bin. They have a host
from the dark ages. Actually I'm having to be backward compatible to NN4
also, imagine that. I was trying to make the mailto form less confusing for
the user given what I've got which isn't much.
    I was going to temporarily host the script on a different server than
the website itself and the reason I wanted to update you is that with
Hostsave (so I'm guessing with other hosts also) that was not possible
because their spam filters would delay or not deliver the form results. Some
hosts can not accommodate the results being delivered to an email not on
their server system, it's too much like spam. Even with the NMS script, only
1 email recipient coded in and the server the form is coming from coded in.
    The age of spam!
Thanks for your help,
Frances




----- Original Message ----- 
From: "Jon Scott" <jscott(at)cpec.org>
To: "Gary Krockover" <gary(at)garykrockover.com>
Cc: "HWG" <hwg-techniques(at)hwg.org>
Sent: Friday, June 25, 2004 7:47 PM
Subject: Re: Mailto: Forms


> Actually if you're still using MAtts then you have a security breach and
your
> system can eb compromised by spammers.  unless Mat has done the update
that NMS
> did to his scripts.
>
> If you want a better version of MAtts, then go to NMS
> http://nms-cgi.sourceforge.net/scripts.shtml
>
> These guys beefed up the script to weed out some potential exploits.
Actually
> the Hosting service I resell had deisabled all the standard Matts scripts
and
> had us rollout the NMS version a year or so ago.
>
> Just a thought.
>
>
>
> Quoting Gary Krockover <gary(at)garykrockover.com>:
>
> > Hi Frances,
> >
> > In the original "Matt's formmail", the redirect to the thank you page
would
> >
> > come with a hidden input in the form, such as (full url!):
> >
> > <input name=redirect type=hidden
> > value="http://www.yourdomain.com/thankyou.html">
> >
> > In fact, the script would balk and throw an error if that page was
missing
> > instead of just showing a 404 error.
> >
> > So, the action of the form is to the script with the full URL, such as:
> > <form action="http://www.yourdomain.com/cgi_bin/formmail.cgi"
> > method="POST">
> >
> > That redirect is then passed to the script and the script uses it to
> > forward the visitor to that page after the form is processed.  No need
for
> > javascript and fancy onsubmit's.
> >
> > There's no problem processing that form on another server as long as the
> > server with the script is set to expect the form from the other
> > server.  That is set in the script itself.  I have the syntax for the
old
> > Matt's formmail, I'd have to see your version to tell you exactly what
to
> > enter/change.
> >
> > HTH,
> > GK
> >
> > At 09:09 PM 6/25/2004, Frances Castelli wrote:
> > >Dear Techies,
> > >
> > >I'm looking for a way to add a redirect to a mailto: form.
> >
> >
>
>
> ***********************************************
> CivicRADAR - Connecting Citizens to Government
> www.civicRADAR.com
> (860) 722-2490 x30
> ***********************************************
>
>

HWG hwg-techniques mailing list archives, maintained by Web Professional Association - IWA