vti_encoding:SR|utf8-nl
# Matt's Script Archive, Inc.:http://www.worldwidemart.com/scripts/      #
# ACCESS CONTROL FIX:Only allow ENV variables in @valid_ENV in          #
#                     http://www.securityfocus.com/archive/1/62033           #
$mailprog = 'c:/winnt/system32/blat.exe';
$tempdir = 'd:/formlog';
$logfile = 'd:/formlog/formmail.log';
# the problem reported at http://www.securityfocus.com/bid/1187              #
if ($ENV{'HTTP_REFERER'} =~ m|https?://([^/]*)$referer|i) {
$time = sprintf("%02d:%02d:%02d",$hour,$min,$sec);
# For each name-value pair:#
# For each require field defined in the form:#
print "Location:$Config{'missing_fields_redirect'}\\n\\n";
print "Content-type:text/html\\n\\n";
# Sort alphabetically if specified:#
print "<b>$field:</b> $Form{$field}<p>\\n";
elsif ($Config{'sort'} =~ /^order:.*,.*/) {
# remove extraneous line breaks and spaces, remove the order:#
$sort_order =~ s/order://;
print "<b>$sorted_field:</b> $Form{$sorted_field}<p>\\n";
<center><font size=-1><a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.9 &copy; 1995 - 2001  Matt Wright<br>
A Free Product of <a href="http://www.worldwidemart.com/scripts/">Matt's Script Archive, Inc.</a>
open(MAIL,">$tempdir\\tempfile:$!"); 
print MAIL "To:$Config{'recipient'}\\n";
print MAIL "From:$Config{'email'} ($Config{'realname'})\\n";
if ($Config{'subject'}) { print MAIL "Subject:$Config{'subject'}\\n\\n" }
else                    { print MAIL "Subject:WWW Form Submission\\n\\n" }
print MAIL "$print_config:$Config{$print_config}\\n\\n";
print MAIL "$field:$Form{$field}\\n\\n";
# Remove extraneous line breaks and spaces, remove the order:#
$Config{'sort'} =~ s/order://;
print MAIL "$sorted_field:$Form{$sorted_field}\\n\\n";
print MAIL "$env_report:$ENV{$env_report}\\n";
use Win32::Process;
#theWin32:: module. Includes the Win32 error checking etc.
# see Win32:: section for included functions.
print Win32::FormatMessage( Win32::GetLastError() );
Win32::Process::Create($ProcessObj, $mailprog, "Blat $tempdir\\\\tempfile\\.tmp -t $Config{'recipient'} -s \\"$Config{'subject'}\\" -f $Config{'email'} -i \\"$Config{'email'} ($Config{'realname'})\\"", 0, DETACHED_PROCESS, ".")|| die &Error; 
#open(MAIL,"|$mailprog $tempdir\\tempfile:$!"); 
# If the e-mail address contains:#
# Basic syntax requires:one or more characters before the @ sign,  #
# valid syntax to have an email address like:user@[255.255.255.0]   #
if ($ENV{'HTTP_REFERER'} =~ m|^https?://([\\w\\.]+)|i) {
Content-type:text/html
<a href="http://www.worldwidemart.com/scripts/formmail.shtml">FormMail</a> V1.9 &copy; 1995 - 2001  Matt Wright<br>
<title>Error:Blank Fields</title>
<tr><th><font size=+2>Error:Blank Fields</font></th></tr>
<tr><td>The following fields were left blank in your submission form:<p>
print LOG "Recipient:$Config{'recipient'}\\n";
print LOG "Subject:$Config{'subject'}\\n";  
print LOG "Sender:$Config{'email'}($Config{'realname'})\\n";
print LOG "$ENV{'REMOTE_HOST'} - [$date] - ERR:bad refferer: $ENV{'HTTP_REFERER'} \\n";
vti_timelastmodified:TR|25 Nov 2004 00:46:30 -0000
vti_extenderversion:SR|4.0.2.7802
vti_backlinkinfo:VX|agmemform.htm ag_membership_form_formmail.htm formmailtest.htm careerform.htm
vti_cacheddtm:TX|25 Nov 2004 00:46:30 -0000
vti_filesize:IR|30195