Posted by shimmyshack on 02/28/07 17:41

On 28 Feb, 17:23, Geoff Berrow <blthe...@ckdog.co.uk> wrote:
> Message-ID: <1172674402.500099.64940@s48g2000cws.googlegroups.com> from
> r...@chaparralboats.com contained the following:
>
> >This page is being passed emailaddress in a query string:
> >http://www.chaparralmedia.net/brochureRequests/contact.htm?emailaddre...
>
> >How do I get that from contact.htm to a varible in my contact.php
> >page? I'm trying to make the php script send an email with the form
> >data to the email address (emailaddress) but I can't seem to get it to
> >work.
>
> As others have said, this really isn't a good idea. Hard code the
> address to which the email will be sent, or, of you have a number of
> addresses, code them into an array and pass a reference.
>
> You might find this a bit easier to implement.www.ckdog.co.uk/phmail
> It just takes an html form and chucks everything at the address you
> specify.
> --
> Geoff Berrow 0110001001101100010000000110
> 001101101011011001000110111101100111001011
> 100110001101101111001011100111010101101011

Just to be clear, I know the point of your form is to allow an
untrusted 3rd party to send email to *themselves*, but it /could/ be
used by said person to send email to *anyone* from their spam
database.
>From the tenor of your post implementing a captcha would probably be
too much hassle for you, so I suggest you include in your emails,
"someone probably you, requested a copy of our broachure.." and add a
way for them to complain to you if it wasn't them. It is illegal in
some places to send unsolicited email to businesses, and you could
find yourself in hot water if your employer comes back to you about
this.
Don't take the - this should have been done yesterday approach -
unless you have at least told your employer about the issues and got
some kind of written assurance. (Extreme perhaps, but it cuts both
ways, they then take ownership of the shoddy job)
Oh and with PHP, unless asp style tags are enabled in the php.ini file
which they usually aren't, you should attempt to use
<?php to open and
?> to close
for portability if nothing else.

[Back to original message]