Form-autoresponder problem

"BruceM" <bruce9950@@hotmail.com> wrote in message
news:3fd501f1@duster.adelaide.on.net...
 > Depends on the particular script & how it's written.
 > Most form mailer scripts now have a security patch in them to check that
the
 > two addressess match EXACTLY with two identicle addressess in the cgi
script

 > BruceM
 >
 >
 > "Sinecure_Bob" > news:vt9iehbgoc2t3c@corp.supernews.com...
  > > It was working fine and quit. > > I went to my host who advised: "I have
sent this info to support at CPanel
  > > and had pretty much a non answer back. I do not know what could have
 > changed
  > > on the server to cause it to not work and don't really have a solution
to
  > > the problem."


Thanks for the try but what is going on makes no sense and since the host
guru (well known here) has no answer I am stumped.
In the cgi mail script there is nothing magic - just the old fashioned:
@referers = ('sechelt.net');
@recipients = &fill_recipients(@referers);
You can see the address reference is to sechelt.net and so anything going to
???@sechelt.net should go through and indeed it does.
I have tried with just one address in the form -e.g. villjoin.TakeThisOut@sechelt.net. I
set up a POP address of villjoin.TakeThisOut@sechelt.net - an autoresponder in CPanel
for it and a forward to me. Submit the form and I get the form and the
server mail system NeoMail has it. BUT no autoresponse to me.
Now send an email to villjoin and I get the email (forwarded back) and the
autoresponse.And it is in NeoMail too.
Now why the heck does the autoresponder work to a email direct but not to
one from a form???
Help appreciated.
Sinecure Bob
mailto:me12@rdarcy.net take out the 2 for it to work<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

In article <vt9iehbgoc2t3c.RemoveThis@corp.supernews.com>,
"Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote:

 > It was working fine and quit. I have some simple form responses set up as:
 > <form action="http://sechelt.net/cgi-bin/Bob.cgi" method="POST">
 > <input type=hidden name="recipient" value="sandytoo@sechelt.net,
 > villjoin.RemoveThis@sechelt.net">

Wow. Prepare to get blacklisted for spam via form exploit shortly . . .<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

Doc O'Leary <droleary.usenet.DeleteThis@subsume.com> wrote in
news:droleary.usenet-54C56F.10355509122003@corp.supernews.com:

 > In article <vt9iehbgoc2t3c.DeleteThis@corp.supernews.com>,
 > "Sinecure_Bob" <rdarcy.DeleteThis@dccnet.com> wrote:
 >
  >> It was working fine and quit. I have some simple form responses set
  >> up as: <form action="http://sechelt.net/cgi-bin/Bob.cgi"
  >> method="POST"> <input type=hidden name="recipient"
  >> value="sandytoo@sechelt.net, villjoin.DeleteThis@sechelt.net">
 >
 > Wow. Prepare to get blacklisted for spam via form exploit shortly . .

Yep. Never, ever pass the recipients through the form values.
Also, if you're using user-input for any other headers (From: Subject:
etc), then make sure to filter out Cc: and Bcc: lines, too



--
Marc Bissonnette
CGI / Database / Web Management Tools: <a style='text-decoration: underline;' href="http://www.internalysis.com" target="_blank">http://www.internalysis.com</a>
Something To Sell? Looking To Buy? <a style='text-decoration: underline;' href="http://www.whitewaterclassifieds.ca" target="_blank">http://www.whitewaterclassifieds.ca</a>
Looking for a new ISP? <a style='text-decoration: underline;' href="http://www.canadianisp.com" target="_blank">http://www.canadianisp.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

"Marc Bissonnette" <dragnet.TakeThisOut@internalysis.com> wrote in message
news:Xns944C77F59E66Adragnetinternalysisc@206.172.150.13...
 > Doc O'Leary <droleary.usenet.TakeThisOut@subsume.com> wrote in
 > news:droleary.usenet-54C56F.10355509122003@corp.supernews.com:
 >
  > > In article <vt9iehbgoc2t3c.TakeThisOut@corp.supernews.com>,
  > > "Sinecure_Bob" <rdarcy.TakeThisOut@dccnet.com> wrote:
  > >
   > >> It was working fine and quit. I have some simple form responses set
   > >> up as: <form action="http://sechelt.net/cgi-bin/Bob.cgi"
   > >> method="POST"> <input type=hidden name="recipient"
   > >> value="sandytoo@sechelt.net, villjoin.TakeThisOut@sechelt.net">
  > >
  > > Wow. Prepare to get blacklisted for spam via form exploit shortly . .
 >
 > Yep. Never, ever pass the recipients through the form values.

Now I am really lost. I put up what I did as an example only 'cause I
thought it would be simple. In fact I am using the formail clone provided by
Page zone so it reads:
<form action="http://sechelt.net/cgi-sys/FormMail-clone.cgi " method="POST">
<input type=hidden name="recipient" value="villageres@sechelt.net">
<input type=hidden name="subject" value="New Village Online Member"
villagres forwards to a real persons address and has the autoresponder.
Now if Page-Zone are providing this as a cgi mail form response then what
can I do? The issue I am trying to resolve is the failure of the
autoresponse to a mail generated from the mail form! Help.

Sinecure_Bob<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

"Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote in
news:vtcmu6no2070b3@corp.supernews.com:

 >
 > "Marc Bissonnette" <dragnet.RemoveThis@internalysis.com> wrote in message
 > news:Xns944C77F59E66Adragnetinternalysisc@206.172.150.13...
  >> Doc O'Leary <droleary.usenet.RemoveThis@subsume.com> wrote in
  >> news:droleary.usenet-54C56F.10355509122003@corp.supernews.com:
  >>
   >> > In article <vt9iehbgoc2t3c.RemoveThis@corp.supernews.com>,
   >> > "Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote:
   >> >
   >> >> It was working fine and quit. I have some simple form responses
   >> >> set up as: <form action="http://sechelt.net/cgi-bin/Bob.cgi"
   >> >> method="POST"> <input type=hidden name="recipient"
   >> >> value="sandytoo@sechelt.net, villjoin.RemoveThis@sechelt.net">
   >> >
   >> > Wow. Prepare to get blacklisted for spam via form exploit shortly
   >> > . .
  >>
  >> Yep. Never, ever pass the recipients through the form values.
 >
 > Now I am really lost. I put up what I did as an example only 'cause I
 > thought it would be simple. In fact I am using the formail clone
 > provided by Page zone so it reads:
 > <form action="http://sechelt.net/cgi-sys/FormMail-clone.cgi "
 > method="POST"> <input type=hidden name="recipient"
 > value="villageres@sechelt.net"> <input type=hidden name="subject"
 > value="New Village Online Member" villagres forwards to a real persons
 > address and has the autoresponder. Now if Page-Zone are providing this
 > as a cgi mail form response then what can I do? The issue I am trying
 > to resolve is the failure of the autoresponse to a mail generated from
 > the mail form! Help.

Looks like they've got a setup in which the 'recipient' address must be
locally hosted;

<a style='text-decoration: underline;' href="http://sechelt.net/cgi-sys/FormMail-clone.cgi?" target="_blank">http://sechelt.net/cgi-sys/FormMail-clone.cgi?</a>
recipient=dragnet@internalysis.com&subject=test%20CGI%20script

responds with:

"Sorry I can't send to dragnet.RemoveThis@internalysis.com. Is
dragnet.RemoveThis@internalysis.com on this server ?"

So I'm guessing it's only set up to send to locally hosted domains...
(Not bad, but still opens it up for spamming people on the local domain,
not to mention leaving your address hanging out in the open for spambots)

Looks like BruceM has more insights into your specific problem.

--
Marc Bissonnette
CGI / Database / Web Management Tools: <a style='text-decoration: underline;' href="http://www.internalysis.com" target="_blank">http://www.internalysis.com</a>
Something To Sell? Looking To Buy? <a style='text-decoration: underline;' href="http://www.whitewaterclassifieds.ca" target="_blank">http://www.whitewaterclassifieds.ca</a>
Looking for a new ISP? <a style='text-decoration: underline;' href="http://www.canadianisp.com" target="_blank">http://www.canadianisp.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

I think I finally worked out what you are saying.
You can't use an autoresponder to a mail generated by a form because it will
respond to your form cgi script. No go.
To solve your problem have a look at other (most) scripts as they do have a
responder built into the script itself. Get it? The script IS the responder,
not the web hosting site.
Just like you can get a mail script that redirects to a "thankyou" page. It
is built into the script itself.
To show you why it won't work like you think it will, try clicking reply to
the one you get. You can't send it to that address. Have a look at the
"from" address?
I have my site set up so that anyone who EMAILS me gets an autoresponder but
if someone fills out & sends a form, then it goes to a dif mailbox with no
responder but gets responded to from the script itself.
Get it?
BruceM


"Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote in message
news:vtcmu6no2070b3@corp.supernews.com...
 >
 > "Marc Bissonnette" <dragnet.RemoveThis@internalysis.com> wrote in message
 > news:Xns944C77F59E66Adragnetinternalysisc@206.172.150.13...
  > > Doc O'Leary <droleary.usenet.RemoveThis@subsume.com> wrote in
  > > news:droleary.usenet-54C56F.10355509122003@corp.supernews.com:
  > >
   > > > In article <vt9iehbgoc2t3c.RemoveThis@corp.supernews.com>,
   > > > "Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote:
   > > >
   > > >> It was working fine and quit. I have some simple form responses set
   > > >> up as: <form action="http://sechelt.net/cgi-bin/Bob.cgi"
   > > >> method="POST"> <input type=hidden name="recipient"
   > > >> value="sandytoo@sechelt.net, villjoin.RemoveThis@sechelt.net">
   > > >
   > > > Wow. Prepare to get blacklisted for spam via form exploit shortly . .
  > >
  > > Yep. Never, ever pass the recipients through the form values.
 >
 > Now I am really lost. I put up what I did as an example only 'cause I
 > thought it would be simple. In fact I am using the formail clone provided
by
 > Page zone so it reads:
 > <form action="http://sechelt.net/cgi-sys/FormMail-clone.cgi "
method="POST">
 > <input type=hidden name="recipient" value="villageres@sechelt.net">
 > <input type=hidden name="subject" value="New Village Online Member"
 > villagres forwards to a real persons address and has the autoresponder.
 > Now if Page-Zone are providing this as a cgi mail form response then what
 > can I do? The issue I am trying to resolve is the failure of the
 > autoresponse to a mail generated from the mail form! Help.
 >
 > Sinecure_Bob
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

<a style='text-decoration: underline;' href="http://www.bizmailform.com/" target="_blank">http://www.bizmailform.com/</a>
Try this?
BruceM


"Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote in message
news:vtcmu6no2070b3@corp.supernews.com...
 >
 > "Marc Bissonnette" <dragnet.RemoveThis@internalysis.com> wrote in message
 > news:Xns944C77F59E66Adragnetinternalysisc@206.172.150.13...
  > > Doc O'Leary <droleary.usenet.RemoveThis@subsume.com> wrote in
  > > news:droleary.usenet-54C56F.10355509122003@corp.supernews.com:
  > >
   > > > In article <vt9iehbgoc2t3c.RemoveThis@corp.supernews.com>,
   > > > "Sinecure_Bob" <rdarcy.RemoveThis@dccnet.com> wrote:
   > > >
   > > >> It was working fine and quit. I have some simple form responses set
   > > >> up as: <form action="http://sechelt.net/cgi-bin/Bob.cgi"
   > > >> method="POST"> <input type=hidden name="recipient"
   > > >> value="sandytoo@sechelt.net, villjoin.RemoveThis@sechelt.net">
   > > >
   > > > Wow. Prepare to get blacklisted for spam via form exploit shortly . .
  > >
  > > Yep. Never, ever pass the recipients through the form values.
 >
 > Now I am really lost. I put up what I did as an example only 'cause I
 > thought it would be simple. In fact I am using the formail clone provided
by
 > Page zone so it reads:
 > <form action="http://sechelt.net/cgi-sys/FormMail-clone.cgi "
method="POST">
 > <input type=hidden name="recipient" value="villageres@sechelt.net">
 > <input type=hidden name="subject" value="New Village Online Member"
 > villagres forwards to a real persons address and has the autoresponder.
 > Now if Page-Zone are providing this as a cgi mail form response then what
 > can I do? The issue I am trying to resolve is the failure of the
 > autoresponse to a mail generated from the mail form! Help.
 >
 > Sinecure_Bob
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem 

"BruceM" <bruce9950@@hotmail.com> wrote in message
news:3fd66419@duster.adelaide.on.net...
<font color=purple> > <a style='text-decoration: underline;' href="http://www.bizmailform.com/</font" target="_blank">http://www.bizmailform.com/</font</a>>
 > Try this?
 > BruceM
 >
Thanks and will do > with fingers crossed.
--
Sinecure_Bob<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Form-autoresponder problem