in reply to Re: Re: Re: Port 80 Mail Relay (Spammers Welcome?)
in thread Port 80 Mail Relay (Spammers Welcome?)

How about an encrypted string containing a timestamp (to avaoid the cron job), the recipient address and a secret key that must be passed as hidden input and validated by formmail?

alex pleiner <alex@zeitform.de>
zeitform Internet Dienste

  • Comment on Re: Re: Port 80 Mail Relay (Spammers Welcome?)

Replies are listed 'Best First'.
Re:^5 Port 80 Mail Relay (Spammers Welcome?)
by blakem (Monsignor) on Sep 13, 2001 at 15:41 UTC
    I don't think its worth getting too complicated with it... After all the "password" is sitting right there in the HTML file. No matter how you generate it, someone could easily slurp it up and use it for nefarious purposes. Luckilly, troublemakers usually don't take that extra step, they just move on to the next MSA site.

    -Blake

      I don't want to argue, but as I wanted to include the recipient's address into that "password" and let formmail validate that, the spammer would not be able to "use it for nefarious purpose". At least not to send out spam.

      But anyway, you are right, it's a bit oversized.

      alex pleiner <alex@zeitform.de>
      zeitform Internet Dienste