ICG Link News
Form Script Upgrade
In order to prevent spammers from grabbing email addresses from your on-line forms and to avoid potential abuse of the script by third party spammers, we are implementing an upgrade that will make use of a configuration file mandatory. We will modify your forms for you within the next month, so you won't have to do anything, but please remember to download any forms before you edit them and test any edits after you make them.
If you would like to give the process a shot yourself, here's how:
Basically, you will be moving any recipient addresses from the form to a configuration file in your /data folder - that includes any f_recipient, f_cc or f_bcc you may be using. It's easy to do... just remove the hidden fields for f_recipient, etc and replace them with a hidden field for f_conf with a value of filename.conf where filename.conf lives in your /data folder. Then in that file you put a tab delimited list of the items you removed. For example, you might replace this:
<form action="/email@example.com" method="POST">
<INPUT TYPE="hidden" name="f_recipient" value="firstname.lastname@example.org">
<form action="/cgi-bin/form.pl" method="POST">
<INPUT TYPE="hidden" name="f_conf" value="myform.conf">
And in the myform.conf file, you might have this:
Notice in this example, we removed the email address from both the form script call and the f_recipient fields.