Forms with PHP

[Jiggles]

This website may of BIG help to people who want to add a booking form to there website.

http://www.iowight.com/iwindex/forms.htm

Happy creating :D

[LastMinuteDJs.net]

boke

[Marc J]

Callum, that is a very basic PHP mail form, and doesn't have any security measures to prevent spamming and misuse. A good PHP form should do some or all of the following: -

1. Checks for valid referer
2. Checks form was posted through browser
3. Checks form data was POSTED
4. Validates email addresses
5. Prevents header injections
6. Provides CAPTCHA (http://en.wikipedia.org/wiki/Captcha) verification.
7. Sanitises form data

Missing some of these features might just mean you get a lot of spam through your form, others are more serious posing security issues and could end up with spammers using your server to send spam :eek:

[Dragonfly]

ive had two instances of bad spamming through my site because i havent got the security thing ..... like 80 emails a day type thing :eek: :eek:

[Jiggles]

Callum, that is a very basic PHP mail form, and doesn't have any security measures to prevent spamming and misuse. A good PHP form should do some or all of the following: -

1. Checks for valid referer
2. Checks form was posted through browser
3. Checks form data was POSTED
4. Validates email addresses
5. Prevents header injections
6. Provides CAPTCHA (http://en.wikipedia.org/wiki/Captcha) verification.
7. Sanitises form data

Missing some of these features might just mean you get a lot of spam through your form, others are more serious posing security issues and could end up with spammers using your server to send spam :eek:

Really all i posted that for was to help people to start to make one:)

[Marc J]

Really all i posted that for was to help people to start to make one:)

Not to worry, your intentions were good, I just wouldn't recommend the script you linked to. In fact, if I found someone using it on my server, I'd disable it straight away!

I haven't used either of these, in fact I just found them, but they're a step in the right direction: -

LevelTen Formmail (http://www.leveltendesign.com/L10Apps/Fm/)
DagonDesign Secure PHP Form Mailer Script (http://www.dagondesign.com/articles/secure-php-form-mailer-script/)

I personally use a very very good one which unfortunately isn't for sale and I can't distribute, sorry!

[CRAZY K]

ive had two instances of bad spamming through my site because i havent got the security thing ..... like 80 emails a day type thing :eek: :eek:

Have a word with Richie, he arranged one for me and it works well without spamming---mind you I do have to change the question ---where are you holding your function?

Keep getting Muppets saying---in a pub---in a barn---in my house--no idea where though:eek:

CRAZY K

[Richie]

The Dagon Design form is excellent and very easy to install.