Feedback on: HTML #5 - Using feedback forms, October 05, 1998 at 05:23:18:

You are here: irt.org | About | Feedback | 23 [ previous next ]

Feedback on:
HTML #5 - Using feedback forms

Sent by
Paul Bennett on October 05, 1998 at 05:23:18:> For example, a form-to-email script
> might look at a hidden control in order
> to find out which e-mail address it
> should send the form to

This can be a really bad idea. Unless
you do this carefully, you give me the
ability to send arbitary e-mail from your
server to anyone I want to - you've
created an anonymous re-mailer. And
don't start talking about the CGI
HTTP_REFERRER field - I can get
around that by telnet'ing to your HTTP
port.

Paul.

Other feedback on 'HTML #5 - Using feedback forms' - show all

HTML #5 - Using feedback forms - shakil February 09, 2002 at 20:48:29
HTML #5 - Using feedback forms - Thomas Gooderham February 05, 2002 at 15:10:49
HTML #5 - Using feedback forms - Kimberly Evans August 06, 2001 at 15:09:26
HTML #5 - Using feedback forms - anonymous February 03, 2001 at 07:30:52
HTML #5 - Using feedback forms - Stan Bogdanov May 23, 2000 at 03:04:24
HTML #5 - Using feedback forms - John K. Mackenzie September 26, 1999 at 16:04:49
HTML #5 - Using feedback forms - Matthew Fox November 11, 1998 at 15:08:45
HTML #5 - Using feedback forms - Paul Bennett October 05, 1998 at 05:23:18
HTML #5 - Using feedback forms - Damian Arguimbau September 30, 1998 at 09:12:30