Web Hosting Talk







View Full Version : Found an alternate to matt wrights formmail


AlaskanWolf
11-12-2002, 05:44 AM
that actually does some good. It will send off a email to the abusers isp if they are attempting to exploit 1.6+ of mw's formmail

http://www.home-port.net/formmail/

The problem is, im having problems with the global setup, i want to set it so it looks like


# Global Alias for entire server
Alias /cgi-bin/formmail.pl /home/mypath/www/formmail/formmail.php
Alias /cgi-bin/formmail.cgi /home/mypath/www/formmail/formmail.php
Alias /cgi-bin/FormMail.cgi /home/mypath/www/formmail/formmail.php
Alias /cgi-bin/FormMail.pl /home/mypath/www/formmail/formmail.php

But when i try it, nothing happens, Anyone got any suggestions? if this can be setup, its a great idea, yah i know formmail is also at cgi-sys but theres no way to force my customers to use it. so the next ideal step is to just cut them off at the server level so if they are still using formmail in their cgi-bin, they would unknowingly be using our formmail

AlaskanWolf
11-12-2002, 05:49 AM
PS: i can get it to work say if i setup something like

Alias /cgi-bina/formmail.cgi /home/directory/www/formmail/formmail.php

but not cgi-bin

SPaReK
11-12-2002, 11:27 AM
Do you still have the ScriptAlias lines for the domain's cgi-bin? You might try commenting that line out, and see if that fixes it.

lotuslnd
11-12-2002, 12:25 PM
btw, the following is supposed to be a much more secure form mailer. it might be worth checking out.

http://nms-cgi.sourceforge.net/

AlaskanWolf
11-12-2002, 05:37 PM
The point im making the formmail above, is its in fact both secure & it acts as a spam complaint system, anyone who tries to exploit the bug in 1.6 will have their ISP notified.

AlaskanWolf
11-12-2002, 05:41 PM
when i remove the scriptalias and restart apache, all i get is a 404 for any existing script and the new alias

oc3
02-04-2003, 02:38 AM
Hello Gary,

did you get this to work globally on the server, if you were successful, could you give us an "How - To" on it .

Regards/-

bear
02-04-2003, 08:21 AM
Hmm...I think I'll look into using this too. I'd rather they stopped trying and get busted than go where I send them. I redirect requests for this to pr0n.com. :D
Seemed like a good idea at the time...