How do I....

[GSK8]

....hide my email address in the NMS formmail?

I finally installed it in my cgi-bin and it works! However, you can still view the email address in source code.

I thought by using this program that the recipient's (me) email would not be seen.

I'm trying to cut down on SPAM.

[Bob]

Found this is a quick search...

Look for the line that assigns the input to the "recipient" variable, comment out, and put the email address there. eg. instead of
recipient = $_POST['recipients'];
use
recipient = "hidden@email.com";

Edit: This may be an available configuration in some formmail scripts but not NMS.

-Bob

[Bob]

Actually reading the NMS readme file this appears to be the configuration area you want...

@allow_mail_to - A list of the email addresses that formmail can send
email to. The elements of this list can be either
simple email addresses (like 'you@your.domain') or
domain names (like 'your.domain'). If it's a domain
name then *any* address at the domain will be allowed.

Example: to allow mail to be sent to 'you@your.domain'
or any address at the host 'mail.your.domain', you
would set:

@allow_mail_to = qw(you@your.domain mail.your.domain);

Indicate a specific email address in the above field and then note the below...

If you leave the 'recipient' field out of the
form, formmail will send to the first address
listed in the @allow_mail_to configuration
variable (see above). This allows you to avoid
putting your email address in the form, which
might be desirable if you're concerned about
address harvesters collecting it and sending
you SPAM. This feature is disabled if the
$emulate_matts_code configuration variable is
set to 1.

-Bob

[GSK8]

So do I remove something from the HTML Form Below? Line #2?

<form method="post" action="http://mysite.com/cgi-bin/linkme.pl">
<input type="hidden" name="recipient" value="myemail@mydomain.com" />
<input type="hidden" name="subject" value="Link Exchange" />
<input type="hidden" name="print_config" value="name,email,site,url,url2,desc" />
<input type="hidden" name="redirect" value="http://mydomain.com/linked.shtml" />
<input type="hidden" name="required" value="name,email,site,siteurl,linkurl,desc" />

[Bob]

Based on the Readme...

<input type="hidden" name="recipient" value="myemail@mydomain.com" />

would be changed to:
<input type="hidden" name="recipient" value="" />

And you would place myemail@mydomain.com in the @allow_mail field in the .pl file.

-Bob

[GSK8]

Also, when someone views the source code and sees:

http://mydomain.com/cgi-bin/linkme.pl, is there anyway they can "hack" it to see the email?

[GSK8]

You rock, Bob! :bow:

Do you know how many years I've been dealing with 200-400 spam emails a day simply because I didn't know I could "remove" my email from the html form and it would still work?????

[Bob]

No as the cgi-bin is placed above your /www directory and is treated as special by Apache as noted in this past post by Arthur...

The short answer: no. You will not be able to view the source.

Files in your cgi-bin are considered special by Apache. It'll always try to execute the file and will only show the output of the script/program. Just like you're not able to view the source of PHP scripts, for example.
http://www.aota.net/forums/showthread.php?postid=63352#post63352

Glad we could help,
Bob

[GSK8]

Thanks Bob!

Should I delete the test .pl files in the cgi-bin? Are those yours?

[Bob]

Any files in your cgi-bin were placed there by you or someone working on your site as FutureQuest places no files in the cgi-bin.

-Bob

[GSK8]

Hmmm....because "linkme_1.pl" and "linkme_2.pl" were not there before. I didn't create them. They were created while this discussion was taking place....

[Bob]

The technicians took a look and the only IP they see that accessed the linkme files, which appear to be copies of the NMS script, was the same IP as you are posting from here in the forums...

-Bob

[Andilinks]

Yes, thanks. I'd been meaning to follow up on my earlier post, this is exactly what I needed too.

[GSK8]

Hey Bob?

No sooner do I incorporate the new and improved Link Exchange Form when I get 5 email spams in a row. :blah:

Can I incorporate a verification image somehow? Or are these people actually doing this manually? Every box is checked and filled out....

http://mydomain.com/link.shtml

[Bob]

Captcha, implemented properly will prevent most, if not all, bot posts to a form however it would not prevent malicious human submissions and be wary of Javascript Captcha solutions as turning off Javascript in the application accessing the form will result in no protection.

Actually there was a thread started yesterday in regards to adding Captcha to an NMS form as posted here:
http://www.aota.net/forums/showthread.php?postid=157652#post157652

While conducting a search for NMS with Captcha implementation I came across this very interesting posting:
http://www.w3.org/TR/turingtest/

I must admit that my search for anyone that is using a NMS formmail with Captcha implemented resulted in lots of Questions asked around the web but little in solutions...

-Bob

[GSK8]

Thanks Bob! I appreciate you taking the time.

For some reason, I just assume you are the all-knowing wizard behind the curtain (along with the other FQ folks) and already have the answers.

Now I don't feel so bad :wink: