in reply to Re^9: CGI-mailer script
in thread CGI-mailer script

here is script author reply: "There are two scripts involved here. My client-side script which runs in a Web browser is listed on my Web page. It is complete. However, I don't have access to the server-side CGI script which does the actual emailing. The script belongs to someone else, I just used it." Maybe someone can recommend ready javascript? Could the FormMail itself be customized for my javascript?

Replies are listed 'Best First'.
Re^11: CGI-mailer script
by gellyfish (Monsignor) on Aug 19, 2004 at 13:45 UTC

    The Javascript you have there relies on a CGI program that has a horribly insecure interface, as it appears that it allows the user of a web page to insert any e-mail and any text they went into a mail - which is of course ideal for the spammers, no one in their right mind is goin to alter a perfectly good, working and secure FormMail program so that it becomes a spam relay simply because you don't want to change some javascript.

    What I recommend is that you make another request to nms-cgi-support@lists.sourceforge.net including the code that you posted earlier and explain clearly that you would like to know how to interface that Javascript with the NMS FormMail, someone may be generous enough to give you the whole solution but we can give you the pointers.

    /J\

      Please specify what unsecure features you see in that javascript? The purpose of script(as author explained)is log visitors statistic(domain, browser,title, url, etc)to get statistic data as much as possible.

        It's not the javascript itself, it is the interface it expects of the CGI program. It expects that the CGI program will allow sending of e-mail from a GET request with the recipient of the e-mail and the entire content specified in the URL.

        /J\