Forum Moderators: coopster & phranque

Message Too Old, No Replies

using formmail on secure servers? Read this!

Important information about windows update bug

         

simonuk

8:32 pm on Feb 17, 2004 (gmt 0)

10+ Year Member



On Friday the 13th last week (Had to be the 13th didn't it <sigh> I noticed that all the scripts I had on my secure server were no longer working properly.

These forms ranged from formmail 1 to NMS formmail 3.11 and not a single one worked correctly.

We've traced the problem to the windows update last week. In fixing the phishing and domain name spoofing they have created bugs in how IE handles text field ID's on secure servers.

If you use formmail and have it running on a secure server only please run a few fake orders to see if you have been affected by this.

The update only causes problems for IE based browsers and those using IE's DLL (Like opera). Netscape users are unaffected by this.

I can't find anyone else who has found this problem yet but I doubt many check order forms as much as I do. If this has affected you please let me know.

I've managed to get the forms working again by shortening the ID to around 5 to 7 characters and removing any - or _ I had in the ID.

Simon.

tombola

9:03 pm on Feb 17, 2004 (gmt 0)

10+ Year Member



Please don't take it personal, but I don't understand why people are eager to use freely available scripts on their server. Using this kind of scripts is inviting hackers.

Why don't you write/use custom-made scripts?

simonuk

11:07 pm on Feb 17, 2004 (gmt 0)

10+ Year Member



Why don't you write/use custom-made scripts?

Because in almost 7 years none of the 30 sites I have that use the script have ever been hacked into.

Plus they have the time to update when needed where as I don't have the time to spare ;)

Simon.

BeeDeeDubbleU

9:27 pm on Feb 18, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



What if you dont know how? DOH!