[Nms-cgi-devel] problems with nms-cgi formmail.pl

[Nick C. <ni...@cl...>]

Here are the problems I can see in the current nms-cgi guestbook.pl
script.

1) Allows the upload of arbitrary HTML, $allow_html does nothing.

2) Makes changes in response to a GET request.

3) Truncates and rewrites the file, so someone viewing the
   guestbook might see a short or empty guestbook during
   an update.

Is anyone working on these ?

Shall I have a go ?

--
Nick