473,326 Members | 2,048 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,326 software developers and data experts.

Can anyone see a problem with this email script?

Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks

<?

Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");

?>

Apr 9 '07 #1
20 1670
Pete Marsh kirjoitti:
Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks

<?

Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");

?>
Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:

mail('y*********@example.com','this is a test', 'Hello Kitty!');

And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.

BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...

--
Ra*********@gmail.com
"Olemme apinoiden planeetalla."
Apr 9 '07 #2
On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks
<?
Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");
?>

Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:

mail('your_em...@example.com','this is a test', 'Hello Kitty!');

And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.

BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...

--
Rami.Elo...@gmail.com
"Olemme apinoiden planeetalla."


hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.

Apr 9 '07 #3
Pete Marsh kirjoitti:
On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
>Pete Marsh kirjoitti:
>>Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks
<?
Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");
?>
Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:

mail('your_em...@example.com','this is a test', 'Hello Kitty!');

And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.

BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...

--
Rami.Elo...@gmail.com
"Olemme apinoiden planeetalla."

hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.
Well you could try looking at what the form actually passes to the
script. Put something like this at the very beginning of your mail script:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

Kinda like trap what it's trying to send and try to figure out if
there's something wrong there, missing parameters or something.

The form being flash explains the colons though... Flash designers...

--
Ra*********@gmail.com
"Olemme apinoiden planeetalla."
Apr 10 '07 #4
On Apr 10, 12:47 am, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
>Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks
<?
Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");
?>
Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:
mail('your_em...@example.com','this is a test', 'Hello Kitty!');
And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.
BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...
--
Rami.Elo...@gmail.com
"Olemme apinoiden planeetalla."
hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.

Well you could try looking at what the form actually passes to the
script. Put something like this at the very beginning of your mail script:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

Kinda like trap what it's trying to send and try to figure out if
there's something wrong there, missing parameters or something.

The form being flash explains the colons though... Flash designers...

Unfortunately, the form is embedded in a flash binary!
I cannot see the source code at this time.
Unbelievable!

Apr 10 '07 #5
Pete Marsh kirjoitti:
On Apr 10, 12:47 am, Rami Elomaa <rami.elo...@gmail.comwrote:
>Pete Marsh kirjoitti:
>>On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks
<?
Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");
?>
Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:
mail('your_em...@example.com','this is a test', 'Hello Kitty!');
And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.
BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...
--
Rami.Elo...@gmail.com
"Olemme apinoiden planeetalla."
hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.
Well you could try looking at what the form actually passes to the
script. Put something like this at the very beginning of your mail script:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

Kinda like trap what it's trying to send and try to figure out if
there's something wrong there, missing parameters or something.

The form being flash explains the colons though... Flash designers...


Unfortunately, the form is embedded in a flash binary!
I cannot see the source code at this time.
Unbelievable!
That's quite alright. That's why I told you to check what the form sends
to the mail script. Insert this line at the beginning of the mailer
script so you'll see what the flash form sends to the mailer, even if
you can't see what is happening inside the flash:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

And then try sending mail from the flash application and study the
results in my_mail_log.txt.

--
Ra*********@gmail.com
"Olemme apinoiden planeetalla."
Apr 10 '07 #6
Pete Marsh wrote:
mail($_REQUEST['recipient']
SPAMMER!

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Apr 10 '07 #7

Toby A Inkster;60036 Wrote:
Pete Marsh wrote:
mail($_REQUEST['recipient']

SPAMMER!

Why do you say that?

FFMG
--
FFMG

'webmaster forum' (http://www.httppoint.com) | 'webmaster Directory'
(http://www.webhostshunter.com/) | 'Recreation Vehicle insurance'
(http://www.insurance-owl.com/other/car_rec.php)
http://urlkick.com/-Free URL redirection service
------------------------------------------------------------------------
FFMG's Profile: http://www.httppoint.com/member.php?userid=580
View this thread: http://www.httppoint.com/showthread.php?t=13789

Message Posted via the webmaster forum http://www.httppoint.com, (Ad revenue sharing).

Apr 10 '07 #8
FFMG wrote:
Toby A Inkster;60036 Wrote:
>Pete Marsh wrote:
>>mail($_REQUEST['recipient']

SPAMMER!

Why do you say that?
http://pete-marsh.example.com/sc****...**@example.net

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Apr 10 '07 #9

Toby A Inkster;60073 Wrote:
FFMG wrote:
Toby A Inkster;60036 Wrote:
Pete Marsh wrote:

mail($_REQUEST['recipient']

SPAMMER!
Why do you say that?

http://tinyurl.com/365y5x

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Yes, that makes it a bad script.
But it does not make him a spammer.

Or maybe I am not understanding your cryptic replies, add a few more
words to make your point clearer.

FFMG
--

'webmaster forum' (http://www.httppoint.com) | 'webmaster Directory'
(http://www.webhostshunter.com/) | 'Recreation Vehicle insurance'
(http://www.insurance-owl.com/other/car_rec.php)
'Free URL redirection service' (http://urlkick.com/)
------------------------------------------------------------------------
FFMG's Profile: http://www.httppoint.com/member.php?userid=580
View this thread: http://www.httppoint.com/showthread.php?t=13789

Message Posted via the webmaster forum http://www.httppoint.com, (Ad revenue sharing).

Apr 11 '07 #10
On Apr 10, 3:27 pm, Toby A Inkster <usenet200...@tobyinkster.co.uk>
wrote:
FFMG wrote:
Toby A Inkster;60036 Wrote:
Pete Marsh wrote:
>mail($_REQUEST['recipient']
SPAMMER!
Why do you say that?

http://pete-marsh.example.com/script.....@example.net

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!

you're getting nowhere, you are an idiot.
I just inherited this script, I didn't write it.
probably you wrote it, which is why it's so bad.

Apr 11 '07 #11
On Apr 10, 3:51 am, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
On Apr 10, 12:47 am, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
>On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
Wondering if anyone can see an error with this script. I get a server
configuration error. THat could mean a module is not being loaded, but
maybe there's a syntax error here, can anyone spot it? Thanks
<?
Error_Reporting(E_ALL & ~E_NOTICE);
$subject="from ".$_REQUEST['Your_Name:'] ;
$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
$headers.='Content-type: text/html; charset=iso-8859-1';
$message='';
while ($field = current($_REQUEST)) {
if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
="i")) {
$message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
$field."<br>";
}
next($_REQUEST);
}
$message.="<br>".$_REQUEST['Message:'];
mail($_REQUEST['recipient'], $subject, "
<html>
<head>
<title>Contact letter</title>
</head>
<body>
<br>
".$message."
</body>
</html>" , $headers);
echo ("Your message was successfully sent!");
?>
Have you tried with the very simplest possible mail? I mean just leave
out all the form shit and custom headers and such and just try:
mail('your_em...@example.com','this is a test', 'Hello Kitty!');
And if you get a server configuration error with that, then it's not a
php problem, it's a configuration problem. If not, you can slowly start
adding the stuff you have above to your mail and then see where it goes
wrong.
BTW. It's not against the law or anything to have colons in field names,
but just to be on the safe side, I wouldn't use them. They serve no
purpouse and it's just not customary to do so. I actually had to test to
see if they really really work, and yes they do, but it's still quite
odd to do so. I was thinking the old "dots are converted to undescores"
trick...
--
Rami.Elo...@gmail.com
"Olemme apinoiden planeetalla."
hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.
Well you could try looking at what the form actually passes to the
script. Put something like this at the very beginning of your mail script:
file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));
Kinda like trap what it's trying to send and try to figure out if
there's something wrong there, missing parameters or something.
The form being flash explains the colons though... Flash designers...
Unfortunately, the form is embedded in a flash binary!
I cannot see the source code at this time.
Unbelievable!

That's quite alright. That's why I told you to check what the form sends
to the mail script. Insert this line at the beginning of the mailer
script so you'll see what the flash form sends to the mailer, even if
you can't see what is happening inside the flash:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

And then try sending mail from the flash application and study the
results in my_mail_log.txt.

Thanks for these interesting replies.

The script is so bad, I think I'm goign to have to do it again.
The flash part isn't even done right either, so I have to make a test
form in any case.

Can you recommend a good generic php form parser?
Simpler the better.

Apr 11 '07 #12
On Apr 10, 9:05 pm, FFMG <FFMG.2ou...@no-mx.httppoint.comwrote:
Toby A Inkster;60073 Wrote:
FFMG wrote:
Toby A Inkster;60036 Wrote:
>Pete Marsh wrote:
>>mail($_REQUEST['recipient']
>SPAMMER!
Why do you say that?
http://tinyurl.com/365y5x
--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux
* = I'm getting there!

Yes, that makes it a bad script.
But it does not make him a spammer.

Or maybe I am not understanding your cryptic replies, add a few more
words to make your point clearer.

Some people just like to make a lot of noise.

Apr 11 '07 #13
Toby A Inkster kirjoitti:
FFMG wrote:
>Toby A Inkster;60036 Wrote:
>>Pete Marsh wrote:

mail($_REQUEST['recipient']
SPAMMER!
Why do you say that?

http://pete-marsh.example.com/sc****...**@example.net
Yeah, but that's a Flash aplication he's working with. A Flash
application in my opinion is much more difficult to exploit than your
regular formmail. And for pity's sake, he wouldn't be the spammer here,
just a web developer who's not completly aware of spammer tactics.
Instead of accusing him for something he's not guilty, you could educate
him.

--
Ra*********@gmail.com
"Olemme apinoiden planeetalla."
Apr 11 '07 #14
Pete Marsh kirjoitti:
On Apr 10, 3:51 am, Rami Elomaa <rami.elo...@gmail.comwrote:
>Pete Marsh kirjoitti:
>>On Apr 10, 12:47 am, Rami Elomaa <rami.elo...@gmail.comwrote:
Pete Marsh kirjoitti:
On Apr 9, 2:34 pm, Rami Elomaa <rami.elo...@gmail.comwrote:
>Pete Marsh kirjoitti:
>>Wondering if anyone can see an error with this script. I get a server
>>configuration error. THat could mean a module is not being loaded, but
>>maybe there's a syntax error here, can anyone spot it? Thanks
>><?
>>Error_Reporting(E_ALL & ~E_NOTICE);
>>$subject="from ".$_REQUEST['Your_Name:'] ;
>>$headers= "From: ".$_REQUEST['Your_Email:'] ."\n";
>> $headers.='Content-type: text/html; charset=iso-8859-1';
>> $message='';
>> while ($field = current($_REQUEST)) {
>> if ((key($_REQUEST)!="Your_Name:") && (key($_REQUEST)!
>>="Your_Email:") && (key($_REQUEST)!="Message:") && (key($_REQUEST)!
>>="i")) {
>> $message.="<strong>".key($_REQUEST)."</strong>&nbsp;&nbsp;&nbsp;".
>>$field."<br>";
>> }
>> next($_REQUEST);
>> }
>>$message.="<br>".$_REQUEST['Message:'];
>>mail($_REQUEST['recipient'], $subject, "
>><html>
>><head>
>> <title>Contact letter</title>
>></head>
>><body>
>><br>
>> ".$message."
>></body>
>></html>" , $headers);
>>echo ("Your message was successfully sent!");
>>?>
>Have you tried with the very simplest possible mail? I mean just leave
>out all the form shit and custom headers and such and just try:
>mail('your_em...@example.com','this is a test', 'Hello Kitty!');
>And if you get a server configuration error with that, then it's not a
>php problem, it's a configuration problem. If not, you can slowly start
>adding the stuff you have above to your mail and then see where it goes
>wrong.
>BTW. It's not against the law or anything to have colons in field names,
>but just to be on the safe side, I wouldn't use them. They serve no
>purpouse and it's just not customary to do so. I actually had to test to
>see if they really really work, and yes they do, but it's still quite
>odd to do so. I was thinking the old "dots are converted to undescores"
>trick...
>--
>Rami.Elo...@gmail.com
>"Olemme apinoiden planeetalla."
hi yes your basic mail works, so it's something else.
it's a very weird set up I've inherited. They have the actual form
separated out and embeded in a flash app, so I can't even see it! Then
they ahve two separate php scripts, one to handle the form processing,
and this one to handle to email respone. but the form processor does
not seem to point to this email script. What a mess.
Well you could try looking at what the form actually passes to the
script. Put something like this at the very beginning of your mail script:
file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));
Kinda like trap what it's trying to send and try to figure out if
there's something wrong there, missing parameters or something.
The form being flash explains the colons though... Flash designers...
Unfortunately, the form is embedded in a flash binary!
I cannot see the source code at this time.
Unbelievable!
That's quite alright. That's why I told you to check what the form sends
to the mail script. Insert this line at the beginning of the mailer
script so you'll see what the flash form sends to the mailer, even if
you can't see what is happening inside the flash:

file_put_contents('my_mail_log.txt', print_r($_REQUEST, 1));

And then try sending mail from the flash application and study the
results in my_mail_log.txt.


Thanks for these interesting replies.

The script is so bad, I think I'm goign to have to do it again.
The flash part isn't even done right either, so I have to make a test
form in any case.
That might just be the best solution :)

--
Ra*********@gmail.com
"Olemme apinoiden planeetalla."
Apr 11 '07 #15
Rami Elomaa wrote:
Yeah, but that's a Flash aplication he's working with. A Flash
application in my opinion is much more difficult to exploit than your
regular formmail.
Your opinion is wrong. The Flash object is just a frontend -- it doesn't
*need* to be exploited -- the script can still be used for spamming
purposes without even looking at the Flash.
And for pity's sake, he wouldn't be the spammer here, just a web
developer who's not completly aware of spammer tactics.
Intentions don't really come into it. His script can emit spam, and given
enough time, will do.
Instead of accusing him for something he's not guilty, you could educate
him.
I did -- in my initial post to this thread I quoted the 27 bytes of code
in his script that allow any miscreant to use his script to spam their way
across the globe.

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Apr 11 '07 #16
FFMG wrote:
add a few more words to make your point clearer.
No.

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Apr 11 '07 #17
Pete Marsh wrote:
On Apr 10, 3:27 pm, Toby A Inkster <usenet200...@tobyinkster.co.uk>
wrote:
>FFMG wrote:
>>Toby A Inkster;60036 Wrote:
Pete Marsh wrote:
mail($_REQUEST['recipient']
SPAMMER!
Why do you say that?
http://pete-marsh.example.com/script.....@example.net

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!


you're getting nowhere, you are an idiot.
I just inherited this script, I didn't write it.
probably you wrote it, which is why it's so bad.
Sorry, I agree with Tony. Whether you wrote the script or inherit it,
if you use it your system will become a spam source.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attglobal.net
==================
Apr 11 '07 #18

Jerry Stuckle;60118 Wrote:
>

you're getting nowhere, you are an idiot.
I just inherited this script, I didn't write it.
probably you wrote it, which is why it's so bad.

Sorry, I agree with Tony. Whether you wrote the script or inherit it,
if you use it your system will become a spam source.

Yes but the way Tony replied does not help anybody, realistically what
could 'SPAMMER' mean?

Telling the user that the code could be injected, (and maybe explaining
how), makes more sense.

FFMG
--

'webmaster forum' (http://www.httppoint.com) | 'webmaster Directory'
(http://www.webhostshunter.com/) | 'Recreation Vehicle insurance'
(http://www.insurance-owl.com/other/car_rec.php)
'Free URL redirection service' (http://urlkick.com/)
------------------------------------------------------------------------
FFMG's Profile: http://www.httppoint.com/member.php?userid=580
View this thread: http://www.httppoint.com/showthread.php?t=13789

Message Posted via the webmaster forum http://www.httppoint.com, (Ad revenue sharing).

Apr 11 '07 #19
FFMG wrote:
Jerry Stuckle Wrote:
>>
Sorry, I agree with Tony.

Yes but the way Tony
Argh!

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact
Geek of ~ HTML/SQL/Perl/PHP/Python*/Apache/Linux

* = I'm getting there!
Apr 11 '07 #20
FFMG kirjoitti:
Jerry Stuckle;60118 Wrote:
>>you're getting nowhere, you are an idiot.
I just inherited this script, I didn't write it.
probably you wrote it, which is why it's so bad.
Sorry, I agree with Tony. Whether you wrote the script or inherit it,
if you use it your system will become a spam source.


Yes but the way Tony replied does not help anybody, realistically what
could 'SPAMMER' mean?

Telling the user that the code could be injected, (and maybe explaining
how), makes more sense.
Indeed. I just thought Toby's answer was brutal, rude and blunt. And it
did not help the poster at all, instead it just insulted. Now then, let
he who is without sin, cast the first stone. We all may be blunt and
rude on occasions and that is that.

--
Ra*********@gmail.com

"Wikipedia on vähän niinq internetin raamattu, kukaan ei pohjimmiltaan
usko siihen ja kukaan ei tiedä mikä pitää paikkansa." -- z00ze
Apr 12 '07 #21

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
by: wayne | last post by:
I have a PHP email script running on two separate websites. Today, I received a form mail generated by the script from each site, with time stamps 10 minutes apart. The entered email address in...
9
by: Jerim79 | last post by:
I am no PHP programmer. At my current job I made it known that I was no PHP programmer during the interview. Still they have given me a script to write with the understanding that it will take me a...
14
by: nsamad | last post by:
Hi All, Is there anyone using python script to programm the Telit GM862-GPS module?? I am a newbie in using python. I am developing an application in which i have to open a GPRS connection and...
5
by: ozzii | last post by:
Hi, I have a asp email script which uses cdosys to send emails with attahcments by iterating through a record set of 500 email addresses. However the script simply times out. I know you can...
9
by: Jerim79 | last post by:
Here it is: <?php if($_SERVER=='POST'){ $Number=$_POST; $Email=$_POST; $Number2=0; $error=0;
1
by: harekrishna | last post by:
Hiii Can some please check my email script. I have gone through it several times but my mails won't come!! here is the script thank you- . .
2
by: pravada | last post by:
Hi i am new to unix. just trying to work my things out. i have a small problem. i needed to search for a file that is created mostly first week of every month and email it to a list.... can some...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.