Feedback on: HTML #5 - Using feedback forms

irt.org | About | Feedback | 23 [ previous next ]

Feedback on:
HTML #5 - Using feedback forms

Sent by
Paul Bennett on October 05, 1998 at 05:23:18: > For example, a form-to-email script
> might look at a hidden control in order
> to find out which e-mail address it
> should send the form to

This can be a really bad idea. Unless
you do this carefully, you give me the
ability to send arbitary e-mail from your
server to anyone I want to - you've
created an anonymous re-mailer. And
don't start talking about the CGI
HTTP_REFERRER field - I can get
around that by telnet'ing to your HTTP
port.

Paul.

Other feedback on 'HTML #5 - Using feedback forms' - show all

• HTML #5 - Using feedback forms - shakil February 09, 2002 at 20:48:29:
• HTML #5 - Using feedback forms - Thomas Gooderham February 05, 2002 at 15:10:49:
• HTML #5 - Using feedback forms - Kimberly Evans August 06, 2001 at 15:09:26:
• HTML #5 - Using feedback forms - anonymous 07:30:52 2/03/01
• HTML #5 - Using feedback forms - Stan Bogdanov 03:04:24 5/23/00
• HTML #5 - Using feedback forms - John K. Mackenzie 16:04:49 9/26/99
• HTML #5 - Using feedback forms - Matthew Fox 15:08:45 11/11/98
• HTML #5 - Using feedback forms - Paul Bennett 05:23:18 10/05/98
• HTML #5 - Using feedback forms - Damian Arguimbau 09:12:30 9/30/98