httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Leif W" <warp-...@usa.net>
Subject Re: [users@httpd] cgi scripts
Date Wed, 03 Sep 2003 23:08:31 GMT
----- Original Message ----- 
From: "Herb Stein" <herb@herbstein.com>
To: <users@httpd.apache.org>
Sent: Wednesday, September 03, 2003 5:58 PM
Subject: [users@httpd] cgi scripts


> I'm trying to set up a page, password
> required per .htaccess, that asks for
> a few non-private bits and emails it
> to someone usingFormMail.pl. It
> complains about page not found, leaves
> the URL on the bar, and if I click GO
> (IE) it works fine. why does is stall
> at the first place?

Sounds like a programming error or misconfiguration.  Check your error log,
there's likely to be something in there.

> I have Options ExecCGI in .htaccess
> but that should not be required
> because of the ServerAlias entry in
> httpd.conf points to FormMail.pl.

Do you mean the ScriptAlias directive specifies the directory in which
FormMail.pl resides?  Maybe show this line to be sure it's correct.

A note about FormMail, it's notorious for being easy to exploit as an "mail
relay".  There's an option to only allow mail being sent from specific
referral domains, but these are trivial to forge programattically in any
scripting or other programming language.  At one job a client was bombarded
with bounced emails as a result of a bulk email spammer abusing the script.

Leif

> I'm braindead no doubt.
>
> --
> Herb Stein
> The Herb Stein Group
> www.herbstein.com
> herb@herbstein.com
> 314 952-4601
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message