Re: formMail.cgi or alternatives

[Sean Porterfield <sporter@xxxxxxxxxxxx>]

Jim Franz wrote:
> > From Google I see this formMail.cgi is perl script (which I know
> nothing about)

> It would seem to me, any "script" language would lack some form of
> editing to stop spammers. Apparently there are crawlers looking for this
> formMail.cgi to exploit.
> jim

There have been many incarnations of FormMail.pl over the years.  The
older ones were extremely insecure.  The problem was that the email
address to receive the completed form could be overridden by the user
filling out the form.  Spammers would just connect to the form, pass it
their spam with a victim's address, repeat.

The newer Perl script does not allow this.

You said formMail.cgi which could be completely different.

On another note, I would be really upset if I found out the credit app I
just filled out was then emailed to someone instead of being securely
stored on a server.