Secure html email forms

On 8 Sep 2006 13:52:42 -0700, "Italia1" <google RemoveThis @cascina-aie.com>
opined:
> Instead of signing up to an expensive e-commerce package - I had an
> idea about creating a secure email form, so I could receive the 50
> or so sales per year, direct to my email client, to run them
> manually through my POS machine.
>
> I thought I might run this past some of you regular mailers in the
> hope of firing your imaginations, preferably not to thoughts of
> fraud, I hastily add.
>
> Setting up an email form with a CGI program on the server is a
> fairly standard solution to submitting forms to email.

Our form uses no CGI. It's all processed through PHP. It has never
been compromised. It is open source SCForm which was written by Jim
Seymour. Does that answer your question?

--
"Black Hole": The economic effect of administering a DNSBL
Our DNSBL - Eliminate Spam at the Source: http://www.TQMcube.com
Don't Subsidize Criminals: http://boulderpledge.org
 >> Stay informed about: Secure html email forms 

Italia1 wrote:

> Instead of signing up to an expensive e-commerce package - I had an
> idea about creating a secure email form, so I could receive the 50 or
> so sales per year, direct to my email client, to run them manually
> through my POS machine.

> Does anyone have experience of an easy to use CGI coding that could
> interface with https in some way?

That's trivial enough, the process is identical to running under regular
HTTP. The PROBLEM is that while the communication between the browser and
the server is encrypted, if you just fire off the data with SMTP it will be
in clear text on its way to your email server. You need to ensure the data
stays encrypted every time it goes across a wire.


--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is
 >> Stay informed about: Secure html email forms 

Excellent links from " I Hate Stock Spams" . Thanks.

For anyone else trying to sort-out similar:

The wiki link is very in depth and an excellent overview to the topic.

NMS, from the site, seems to stand for Not Matt's Software. - Matt
seems to have been a young coder who set up a bank of CGI scripts, due
to their general absence. They got widely adopted but were badly coded.
Even Matt acknowledges this point - he was only a teenager at the time.
NMS and others have built on his path finding.

I found a link to SCForm, mentioned a few posts above:
http://jimsun.linxnet.com/SCForm.html

None of the readme or faq files anywhere seemed to explain very clearly
about integrating ssl or such. I still have that to solve. - Part of
the fun of learning, I guess. . .
 >> Stay informed about: Secure html email forms 

Italia1 wrote:

> None of the readme or faq files anywhere seemed to explain very clearly
> about integrating ssl or such.

Its a separate issue. SSL is about communication between the browser and the
server. CGI is about communication between the server and the CGI. There
isn't any point in detailing how to set up SSL in documentation for a CGI
script as its not connected.


--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is
 >> Stay informed about: Secure html email forms