I Get a FormMail Error; Hosting Service Does Not

[tonyb48]

My first CGI. My Hosting Service generously offers a shared form mailer FormMail 1.6 by Matt Wright. The hosting service edits the @referers upon request. When I use this script in my form I get a "Bad Referrer - Access Denied" message. However, when my hosting service runs my form, it works perfectly. 1. Is there a solution to this? 2. Should I try running the later version of FormMail from my own CGI-BIN? Thank you very much. Tony

[Wizcrafts]

Tony;

Matt Wright's FormMail scripts are extremely insecure! I recommend that if you are able to use your own scripts that you obtain the current version of NMS Formmail, at [nms-cgi.sourceforge.net ]. There are instructions about configuring and installing it on their site, and on my own webpage about FormMail security (which I cannot post here).

Wiz

[tonyb48]

Thank you! That is exactly what I did and it worked. Editing the script and posting in my cgi-bin were first time occurences for me and involved some fear & debugging. Inside the NMS script I had the option to turn off the @referer check. I did this. I think what happened is the 2Wire modem that came with my DSL service probably strips of the @referer information as part of its firewall. I followed the security recomendations on the NMS site & I will check out yours as well. Thanks again. Novices need support & I appreciate yours.
Tony

[Wizcrafts]

Glad to be of help Tony. While you are configuring NMS be sure to learn to use the Alias feature. This allows you to refer to the recipient(s) by a number in the form, and translate the numbers into actual email addresses in the script, thus hiding them from the harvester bots. I also chmod my nms script to 711, which disallows reading by the World, just in case.

Wiz
PS: you can sticky mail me for my Formmail Security page location, if you'd like.