PDA

View Full Version : PGP Form Mail V4.0 Released


Rich
12-01-2003, 02:01 PM
PGP Form Mail has just been updated to V4.0:

http://www.rsmarketing.com/pgp/

PGP Form Mail alllows you to securely accept information via a simple HTML form and will send you an encrypted e-mail containing the data submitted by the user.

PGP Form Mail is based on Matt Wright's popular FormMail script. This latest version of PGP Form Mail incorporates the latest security patches found in FormMail.pl V1.92.

Important Note: Although this version of PGP Form Mail is a replacement for previous versions, you will need to update the configuration section of the script for proper operation. Also note that due to new configuration parameters contained in FormMail.pl V1.92, this version of PGP Form Mail also includes some additional configuration parameters that need to be defined.

It is HIGHLY RECOMMENDED that you configure and test this version in your operating environment before replacing your production scripts

Stephen
12-01-2003, 02:17 PM
keep up the good work rich. your pgp form mail script is one that has always intrigued me. except for the fact that i haven't had a pressing need to use it to date, i'd have installed it already. i'm sure the day will come soon enough, though. so i look forward to using it then.

dank
12-01-2003, 02:25 PM
I don't remember why it wasn't working, but does the new version work with PHP? I think it was a safe_mode issue, which may no longer be the case with FQ's customizations.

Dan

Rich
12-01-2003, 02:48 PM
I don't remember why it wasn't working, but does the new version work with PHP?
Sorry, PGP Form Mail is 100% Pure Perl :)

Secure mode would be one issue for a encrypted mailer for PHP since a process must be forked in order to execute PGP.

An equally important capability would be something similar to Perl's 'open3' command that allows you to open all pipes at once (input, error, output) and execute a command -- all without ever touching the file system. This is the secret key that makes PGP Form Mail more secure than any of its competitors.

<edit>
Note, however, that there is no reason why PGP Form Mail would not work with a PHP HTML form as input. But, I'm not sure if this is what you meant, though.
</edit>

dank
12-01-2003, 02:57 PM
Sorry, PGP Form Mail is 100% Pure Perl
Yes, I realize that. :)

Note, however, that there is no reason why PGP Form Mail would not work with a PHP HTML form as input.
Correct ... what I meant and did not really specify (still trying to remember back to the particulars of the problem), is that it did not seem possible at the time to route PGP encryption through PHP. However, I'm thinking that might have been a separate issue from PGP Form Mail itself...

Dan

Terra
12-01-2003, 03:50 PM
An equally important capability would be something similar to Perl's 'open3' command that allows you to open all pipes at once (input, error, output) and execute a command
(Off Topic) Very scary stuff right there... :shocked:

;)

Doing something like 'open3' is extremely difficult to get right due to the high potential of deadlock... Even to this day, I avoid such mechanics and simply redirect the various filehandles to different files and then post process them...

I for one would love to see a bulletproof implementation of 'open3' methodology that doesn't cause the loss of hair...

--
Terra
--open3 is the proverbial Holy Grail with *nix pipes--
FutureQuest