Eep!

Since it looks like davorg hasn't seen this yet, I guess I'll be the one to point this out.. don't use Matt's scripts, they're insecure and badly written. There's a good reason he and some other respected Perlmonks have been working hard on NMS, which is a nicely coded drop-in replacement which adheres to proper coding practices.

Have a look here is you don't just want to take my word for this, or SuperSearch for 'Matt's Script Archive'.

Don't try and debug Matt, use NMS. It's quicker, safer, and the right thing to do. Go on, you know you want to.

Are you running mod_perl? If so, use Apache::PerlRun for the crappy scripts from Matt's Archive. Are you running some other speedycgi-like implementation that runs a longer term interpreter? Quit using it.

You might appreciate http://nms-cgi.sf.net/, which aims at rewriting the scripts with added sanity. The NMS versions are more likely to work and less likely to contain huge gaping security holes.

- Yes, I reinvent wheels.
- Spam: Visit eurotraQ.

As Molt has pointed out, you really shouldn't be using Matt's scripts if you value the security of your site at all.

In particular, FormMail has recently been responsible for a large number of spam email attacks. Even Matt's latest version (1.9) doesn't completely fix this problem. See this document for full details.

I'd recommend that you use the nms version instead, particularly as we've recently been putting effort into ensuring that it runs under mod_perl.

"The first rule of Perl club is you do not talk about Perl club."
-- Chip Salzenberg