I don't know too much about SMTP, so I'll let someone else answer the
question. But you should make sure that if you're providing a script
to send an email to any entered email address that you have some way to
ensure that bots and scripts cannot use your script (and therefor your
server) to spam. It could very easily be done, and it would more than
likely cost you your hosting.