This script can be abused. I can insert newlines into the
usermail field and have the contents emailed to anyone I want.
If you've ever gotten SPAM that started out as something like "here is the contents of your feedback form", followed by some spam, it's from a script like this.
Please do not deploy this script. Your server will be blackballed within hours of the first SPAM sent using it. Then good luck getting back on the good side of the blacklisters.
Additionally, I think this is based on a common script which has this flaw (is it Matt Wright's "mailform", or something like that?), so the following is a lie:
## Created by Aaron Anderson
## sulfericacid@qwest.net
It's not nice to lie within a community of contributors. {sigh}
-- Randal L. Schwartz, Perl hacker
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.