Web Wiz - Green Windows Web Hosting
Web Wiz Homepage Search Web Wiz

  New Posts New Posts RSS Feed - Mail Scripts..
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Mail Scripts..
 Post Reply Post Reply
Author
  Topic Search Topic Search  Topic Options Topic Options
westwight View Drop Down
Newbie
Newbie


Joined: 09 October 2004
Location: United Kingdom
Status: Offline
Points: 34 		Post Options Post Options   Thanks (0) Thanks(0)   Quote westwight Quote  Post ReplyReply Direct Link To This Post Topic: Mail Scripts..
    Posted: 10 January 2007 at 1:34pm
I've just had my asp mail scripts pulled by my ISP because they think the scripts are vulnerable to misuse by spammers.  If anyone can help I'd be grateful.
 
I use a simple contact form on the website that passes the data to an ASP page for processing.  The code is as follows:

Set MyMail = CreateObject("CDONTS.NewMail")
MyMail.From = "feedback@mysite.co.uk"
MyMail.To = Request.Form("FromField")
MyMail.Subject = "Thanks from ..."
MyMail.BodyFormat = "0"
MyMail.MailFormat = "0"
MyMail.Body = "Blah, blah"
MyMail.Send
Set MyMail = Nothing

and it gets repeated to send the data to the administrator.
 
The comment from the ISP was
"As it stands people can just post "Request.Form("FromField")" and send email to any email address this like. You may need to place some form of validation in your ASP files."
 
But I've no idea how to do that.  Can anyone recommend a way to validating, or better yet a simple, foolproof way of forwarding contact email?
 
Regards
Bob
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844 		Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 10 January 2007 at 2:04pm
It looks like what they are saying is you need to hard code in the 'To' email address, otherwise the email form could be manipulated to send an email to any email address eg:-

MyMail.To = "you@yourEmailAdrress.com"
Web Wiz Forums Hosting
ASP.NET Web Hosting
Back to Top
westwight View Drop Down
Newbie
Newbie


Joined: 09 October 2004
Location: United Kingdom
Status: Offline
Points: 34 		Post Options Post Options   Thanks (0) Thanks(0)   Quote westwight Quote  Post ReplyReply Direct Link To This Post Posted: 10 January 2007 at 2:30pm
But this is the part of the form thanking the submitter for their email.  Therefore I need to use the email address they have provided.
 
I suppose I could get rid of that section and just pop up a box saying Thank You.  I don't really want to do that because a similar form (which apparently isn't causing a problem) has links in it to our forum and mailing list (and damn fine forums and mailing lists they are too! Smile) 
 
Bob
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.

Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.