[Nms-cgi-devel] Re: AlienForm2 (was FormMail security vulnerability)

[WaveWeb <in...@wa...>]

> I wouldn't use AlienForm2 in its current form if I were you.
> It looks to me like it's wide open to SPAM relaying.  There's no
> place in the script or any of the templates to set a list of
> allowed e-mail recipients, which strongly suggests to me that it
> will accept any recipient.
> With abuse of formmail scripts that accept any recipient on the
> increase at the moment, I think you'd be foolish to deploy one.
> I've contacted the author, so hopefully there'll be a new version
> of AlienForm2 that fixes this issue out soon.

Thanks for your reply, Nick! Sorry I reply only yet...

Guess I'll have to stick to nms-cgi.sourceforge.net's Formmail... Although=
 I'm still seeking for a solution with custom templates that gives me the =
ability to have a single script for multiple virtual sites on a web server=
=2E

Best regards

Meaulnes Legler
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
~ http://www.WaveWeb.ch ~
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
~  Z=FCrich, Switzerland  ~
~  tel: +41 1 260-1660  ~
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~