Phoenix Network Forums

im wondering if anyone could help me with a form for a school website

it needs to look sort of like this

------------------------------------------------
|_______________________________________| (name goes here)

------------------------------------------------
| !
| !
| !
| (what they want to say goes ! | here) !
| !
| !
|______________________________________ !

------------------------------
| click to email |
------------------------------

SORRY FOR MY BAD DESCRIPTIONS BUT IVE HAD AROUND 5 HOURS SLEEP in the last week. please help me by posting anything aand everything youve got

thanks

David

If you have access to perl and a cgi-bin on the school's web server, then look no further than Formmail.
http://www.scriptarchive.com/formmail.html

If you do not have perl, then there are other ways, but some are not as secure. Basically any server side scripting you have available will do the job perfectly, while client side methods are susceptible to injection/XSS.

If you have another server side language let us know so we can reccommend other solutions.

As I am immensly bored and cannot sleep I decided to write something really basic in php....extremely easy to modify for any use and yeh...

[php]
if (isset($_REQUEST['post'])) {

$to = '[email protected]';

$subject = 'the message subject. ie. Form Submission from website!';

$message = "
Website submit form!!!!
Username: $_REQEUST['user']
E-mail: $_REQUEST['mail']
etc. etc.
";
$message = wordwrap($message, 70);


$headers = 'From: Webite Submit form <[email protected]>' . "\r\n" . 'Reply-To: [email protected]';

mail($to, $subject, $message, $headers);

echo "Form successfully submitted";

} else {

echo " <form action="#" mehthod='post'>
Username: <input type='text' name='user'><br>
E-mail: <input type='text' name='mail'><br>
etc. etc.
<input type='submit' value='submit'>
</form>
";

}
[/php]

Gee, nice of you Tim, but it is rather insecure. It is easily modified to a sound script though. As it is, an attacker could easily use it to send a mass email to anyone of his choosing using the webserver's bandwidth.

http://securephp.damonkohler.com/index. ... _Injection

is there a way of doing it in javascript? cos the rest of the site is based around that

Your probably going to tell me to give java script a rest but with this project the email is not important and security isnt too much of a problem as the site is internal I just need a way of getting the text from the box adn giving it to the teacher with minimal effort and time

if your not concerned about security, use tim's php script.

ok il give it a go

Tim, you've even taken the effort to syntax-highlight the source code. You must have been really bored. =)

krod wrote:if your not concerned about security, ...

The world is coming to an end.

mm_freak wrote:

krod wrote:if your not concerned about security, ...

The world is coming to an end.

I feel so proud to have launched the appocalypse

not many people can be bothered wasting bandwith, and if you sign up to a good webhosting company, you wont need to worry too much about bandwith

mikey1090 wrote:not many people can be bothered wasting bandwith, and if you sign up to a good webhosting company, you wont need to worry too much about bandwith

You're out of context, my friend. Maybe you should read and think before posting.

mm_freak wrote:You're out of context, my friend. Maybe you should read and think before posting.

I was trying to figure out what he was trying to say as well, but I just gave up and thought it was just me.

stupergenius wrote:I was trying to figure out what he was trying to say as well, but I just gave up and thought it was just me. :o

mikey1090 seems to be talking non-sense everywhere.

mm_freak wrote:Tim, you've even taken the effort to syntax-highlight the source code. You must have been really bored. =)

Nah, wasn't that bored,

Code: Select all

[php] [/php]

Sides...if I had tried the highlighting I would have had inconsistincies (sp?)