Just picking up on this, there are a couple of reasons why I wouldn't use the BNBForm ...

• This script uses a hand-rolled CGI parameter parsing routine which, while not as poorly written as that in some scripts, is still vunerable to exploitation - For a further discussion of this, see the excellent discussion piece use CGI or die; by Ovid.
• This script allows the email address of the receipient to be specified from a form field, allowing the script to be hijacked for the purposes of harassing email or unsolicited commercial email.
• This script relies upon the HTTP_REFERER environment variable to validate the submitting web site domain - This can be faked such that in combination with the point about, provide little security from hijacking of the script for maligned means.

Instead, I would recommend the FormMail script from the NMS Archive - This collection of scripts have been written with security and interoperability at the foremost of concerns and undergo a great deal of peer review.

 

perl -e 'print+unpack("N",pack("B32","00000000000000000000000111000100")),"\n"'