Cgiemail question

Hospedaje - eHarmony - Car Finance - Bad Credit Mortgages - Auto Refinance

Chiara

Jun 2nd 2004, 5:40 pm

I'm trying to set up a cgi form on my site using the already-installed cgiemail program on my host. I have followed the directions but it won't work. Can you tell me where the template.txt is supposed to go? Does it go in the www/ section or the cgi-bin/?

Don't know what could be going wrong except the location of the template.

digitalpoint

Jun 2nd 2004, 5:46 pm

Probably in the same directory that your CGI is in. Although it's hard to say without seeing it.

Chiara

Jun 2nd 2004, 6:12 pm

Hi - the web host support person responded and solved the problem. It needed to be in the public html folder. Thanks!

vagrant

Jun 2nd 2004, 7:00 pm

i would STRONGLY suggest re naiming the pl / cgi to something odd just to stop people trying to spider for the script name.

calling it formmail.cgi is very unwise, 5g6hz.cgi would be better ??

Chiara

Jun 2nd 2004, 7:44 pm

Vagrant, I'm not sure if I understand. It isn't called formmail.cgi. How can people spider for it? I'm confused now.

digitalpoint

Jun 2nd 2004, 8:28 pm

It keeps people from trying to use it maliciously.

Chiara

Jun 3rd 2004, 2:48 am

Could you enlighten me on exactly what malicious things they could do? Sorry, this cgi stuff is all new to me.

nlopes

Jun 3rd 2004, 6:41 am

The formmail script is being used to send SPAM.
If you take a look to your logs, you will see some requests for that file.

vagrant

Jun 3rd 2004, 9:26 am

anyone i find in my logs as looking for formail gets their ip range banned.... usually china *sigh*

it is never a good idea to install scripts in the default folder is it can be changed.... makes it harder for ppl to exploit the inevitable bugs.

Chiara

Jun 3rd 2004, 4:41 pm

I don't think there's a formmail script on my site. It's called cgiemail and it is in the cgi-bin. Is that the same thing? The template name in the public folder can be changed, though. Sorry, I'm still confused.

Weirfire

Jun 3rd 2004, 5:49 pm

i would STRONGLY suggest re naiming the pl / cgi to something odd just to stop people trying to spider for the script name.

Would creating your robots text file with Disallow : \cgi-bin\ not stop the spiders?

To get the cgiemail to work make sure your form action is correct. If cgi-bin/cgiemail doesnt work then try cgi-sys/cgiemail.

When I tried it on my host neither of them worked so I had to use a PHP script. Thats what I get for using a cheap host!!