1. Let’s Make An E-Mail Form! Bonney Armstrong GD 444 Westwood College February 9, 2005

2. Elements In A Feedback Form Their name Their email address Their phone number Any comments they might have Any options you might want to include –More information? –Rate something? –Join newsletter?

3. How The HTML Looks – Getting Started This piece of code uses the POST method It goes between the and tags It refers to a Perl script placed in the CGI or CGI-BIN directory

4. How The HTML Looks – Hidden Fields The email address is where the results will be sent The URL is where the page will redirect to once the information has been submitted via POST method You can specify the subject line of the email to be sent Sending along the environment variables can be helpful in troubleshooting

5. How The HTML Looks – Input Fields Name E-Mail Telephone Fax Please contact me as soon as possible! There are various elements to a form -,, etc. Give each element a descriptive name (since this will appear in your email) with NO SPACES (underlines are OK) Leave enough room in the elements for users’ data

6. How The HTML Looks – SUBMIT And RESET Buttons We welcome your feedback! If you have comments, questions, or suggestions, please share them with us. Thanks! Comments: May we contact you?: Name E-Mail Telephone Fax Please contact me as soon as possible! Don’t forget your SUBMIT and RESET buttons; these are reserved keywords (and keep their layout consistent) Enclose all field coding with a FORM end tag

7. How The HTML Looks - Complete We welcome your feedback! If you have comments, questions, or suggestions, please share them with us. Thanks! Comments: May we contact you?: Name E-Mail Telephone Fax Please contact me as soon as possible!

8. FormMail.pl – Path Variables #!/usr/local/bin/perl ############################################################################## # Define Variables # # Detailed Information Found In README File. # # $mailprog defines the location of your sendmail program on your unix # # system. The flags -i and -t should be passed to sendmail in order to # # have it ignore single dots on a line and to read message for recipients # $mailprog = '/usr/sbin/sendmail -i -t'; Know your path to Perl (your hosting provider or system administrator should know this) Know your path to SENDMAIL (see above) Change only the items in red – leave everything else alone or that is typed behind a # sign Usually the default settings that come with the script are correct for most Linux-based systems

9. FormMail.pl – Domain And IP Address # @referers allows forms to be located only on servers which are defined # # in this field. This security fix from the last version which allowed # # anyone on any server to use your FormMail script on their web site. # @referers = ('himblau.com','66.235.221.109'); Again, you will only change the items in red You will put in the name of your domain You will put in the IP address of your domain –If you don’t know your own IP address, open up a command or MS- DOS window, then type “ping yourdomainname.com”, using whatever your domain name is –The IP address will appear in the window; type that number in This prevents other domains or servers using your system to send mail (you get charged for that bandwidth!)

10. FormMail.pl – Allowed E-Mail Domain # @recipients defines the e-mail addresses or domain names that e-mail can # # be sent to. This must be filled in correctly to prevent SPAM and allow # # valid addresses to receive e-mail. Read the documentation to find out how # # this variable works!!! It is EXTREMELY IMPORTANT. # @recipients = &fill_recipients(@referers); To enable email to be sent to any address within your domain, make sure that the recipients variable is set to any recipient at your specified referrer Since you’ve already specified that the referring domain is himblau.com in this case, all email sent to * @himblau.com will be sent

11. FormMail.pl – Envelope Information # ACCESS CONTROL FIX: Peter D. Thompson Yezek # # @valid_ENV allows the sysadmin to define what environment variables can # # be reported via the env_report directive. This was implemented to fix # # the problem reported at http://www.securityfocus.com/bid/1187 # @valid_ENV = ('REMOTE_HOST','REMOTE_ADDR','REMOTE_USER','HTTP_USER_AGENT'); # Done # ############################################################################## This isn’t necessary, but is a nice-to-have This enables you to put the environment variable information in the capture area of the form and have it passed to you in the response email that you will receive And that’s all you have to modify! Leave the rest of the FormMail.pl script alone Copy it into your CGI or CGI-BIN directory Ensure permissions are set to (CHMOD) 755 (Read and Execute)

12. FormMail.pl – Overview of Edited Area ############################################################################## # Define Variables # # Detailed Information Found In README File. # # $mailprog defines the location of your sendmail program on your unix # # system. The flags -i and -t should be passed to sendmail in order to # # have it ignore single dots on a line and to read message for recipients # $mailprog = '/usr/sbin/sendmail -i -t'; # @referers allows forms to be located only on servers which are defined # # in this field. This security fix from the last version which allowed # # anyone on any server to use your FormMail script on their web site. # @referers = ('himblau.com','66.235.221.109'); # @recipients defines the e-mail addresses or domain names that e-mail can # # be sent to. This must be filled in correctly to prevent SPAM and allow # # valid addresses to receive e-mail. Read the documentation to find out how # # this variable works!!! It is EXTREMELY IMPORTANT. # @recipients = &fill_recipients(@referers); # ACCESS CONTROL FIX: Peter D. Thompson Yezek # # @valid_ENV allows the sysadmin to define what environment variables can # # be reported via the env_report directive. This was implemented to fix # # the problem reported at http://www.securityfocus.com/bid/1187 # @valid_ENV = ('REMOTE_HOST','REMOTE_ADDR','REMOTE_USER','HTTP_USER_AGENT'); # Done # ##############################################################################

13. Putting It All Together Upload your HTML files to the server Ensure your FormMail.pl script is in the right directory and has the right permissions set Ensure the paths are set correctly within the script Make sure you have access to the email account you’ll be sending to Test the page and check for your results!