recommendation for secure form-handler script?

sending e-mails to variable addys, but no addys shown in HTML

[stapel]

I have been quite happy with BNBForm as a form-handler that sends form contents, via e-mail, to designated recipients. The script can send the form contents to variable recipients, depending on user choices. That is to say, the recipient list is not fixed. For instance, the feedback might be directed to the webmaster (about a typo, say) and would be sent to the default e-mail address, or the feedback might be directed to the corporate board and would be sent to a list of completely different e-mail addresses.

The only downside to the script (which is quite a downside nowadays) is that BNBForm "hides" the e-mail addresses in the form's HTML. Naturally, bad-bots harvest the addresses.

So now I'm looking to replace BNBForm, but I would like to retain the variable-address (chosen from a drop-down menu) option. Can anyone recommend a secure but not-to-complicated script? "Free" would also be nice.

Thank you.

Eliz.

[le_gber]

Hi stapel,

try this page: http#//nms-cgi.sourceforge.net/scripts.shtml

Go for the formail. The email are replaced by numbers in the html and you match the numbers with actual email addresses in the cgi script.

It's easy enough - I use it ;)

Hope this help

Leo

[stapel]

Thanks. I'd seen this script, but hestitated to use it, due to its basis in the Matt Wright script. (My web host has banned the use of formmail.pl, and regularly checks all accounts to delete any instances found.)

Last night, my husband and I inserted what turned out to be a fairly simple change to the BNBForm script, along the lines of what you suggest. The HTML form allows the user to choose the recipient ("Send your message to the webmaster, the manager, the corporate board, or...."). This choice is sent to the script as a key (or list of keys). The script then converts the key(s) to e-mail address(es).

Thank you.

Eliz.