Post a mail form to perl cgi from MC

[Alejandro Tejada]

Hi Developers,

This is the script i'm using to
post a message to several email
directions from MC:

Create a stack with all the flds
specified in the script.

In your server cgi directory, you need a
properly configured copy of the perl
script "FormMail.pl". Use the nms version
of the script that has increased security
built-in.
<http://nms-cgi.sourceforge.net/scripts.shtml>

This is the script of a "Send mail" button:

on mouseUp
  -- Setting httpheaders as recommended by Dave Cragg
  -- in the message "HTTP headers for posting data"
  put "User-Agent: MyApp 1.0" into tHeaders
  set the httpHeaders to tHeaders
  
  put "http://www.mywebsite.com/cgi-bin/FormMail.pl"
into tUrl -- put here your own formMail direction!!!
  put "Exercise=Math test" into tString
  put "&Professor=Blas Pascal" after tString
  put "&recipient=" & field "mail recipients" after
tString -- add recipients separated by comma: 1,2,3
etc
  put "&realname=" & field "sender name" after tString
  put "&email=" & field "sender email" after tString

-- The following enviroment variable give info
-- about the user.
  put "&env_report=REMOTE_ADDR" after tString
-- put "&env_report=HTTP_USER_AGENT" after tString

put "&subject=" & field "message subject" after
tString
put "&Results=" & field "message" after tString
put crlf after tString
  post tString to url tUrl
  if the result is empty
  then
    put it -- into message box
    set the htmltext of fld "result" to it 
else
    answer the result
  end if
end mouseUp

Did anyone foresee any security risk in this code?

al

=====
Visit my site:
http://www.geocities.com/capellan2000/
Search the mail list:
http://mindlube.com/cgi-bin/search-use-rev.cgi

__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools