Security update for FormMail

*skolnick* · 08-07-2001, 09:08 AM

I went to get a copy of FormMail to implement some extensions, and found the following note on
Matt's Script Archive: FormMail:

Any users who are using the popular version 1.6 or the recently released version 1.7/1.8, should upgrade immediately. The new version prevents unwanted anonymous spamming through your implementation of FormMail and also prevents unwanted access to environment variables. If you are having problems receving e-mail and using the redirect variable, version 1.9 should cure that as well. The new script has two extra arrays you must now define, but will not affect current forms or the way they appear after having been submitted.
UPGRADE IMMEDIATELY!

I noted that FormMail v1.6 is in /cgi-sys/.

Regards,

dv

**Terra** · 08-07-2001, 09:37 PM

Upgrade facilitation is currently under review as we must ensure there is a logical and clearly defined warning and migration path...

--
Terra
sysAdmin
FutureQuest

*skolnick* · 08-08-2001, 08:48 AM

Thanks. Please note the all caps directive was from Matt's Script Archive, not me.

*Pontist* · 08-12-2001, 08:38 AM

Quote:

Originally posted by Terra:
Upgrade facilitation is currently under review as we must ensure there is a logical and clearly defined warning and migration path...

Terra -

Do you have any idea on a timeframe for the FormMail 1.6 --> 1.9 upgrade?

- Pontist

Just curious.....

**Terra** · 08-12-2001, 08:48 AM

Most likely after all major server upgrades are completed...

This way, updating across the board will be much easier...

--
Terra
--TAZ ate the postman which delivered the spam--
FutureQuest