PDA

View Full Version : formmail security


maxmillion
January 19th, 2005, 11:24 PM
Hi,

One of my websites was created by someone else, and they have used a formmail script from Matts script archive, which appears to work ok.

Question is; is it possible to have the form mailed to an additional email address which doesn't show in the code? It's just that the "hidden" and "redirect" terms bug me slightly and we have an instance where the person sending the email receives a follow up from the someone else.

Also, WHY does it say "hidden" when we can all plainly see where its going?

Below is part of the code
<input type="hidden" value="info@mywebsite.com" name="recipient"><input type="hidden" value="http://www.mywebsite.com/thanks.html" name="redirect"><input type="hidden" value="Info Pack Request" name="subject"></td>

Thanks
Michael

degsy
January 20th, 2005, 12:49 AM
I would go for PHP, but you may want to checkout this adaption of the Formail script
http://nms-cgi.sourceforge.net/

maxmillion
January 21st, 2005, 06:28 AM
Thanks Degsy,

I will look at the php option for sites that are created and managed by me, but this particular site is not under my control.

I read through the link you provided. Interesting and I see that it is possible.

Thanks for your help.

Michael