November 19, 2008 01:11am pst

1. Adam314 809,084
2. ozo 479,021
3. FishMonger 141,057
4. Tintin 118,861
5. hielo 74,770
6. mjcoyne 69,328
7. nedfine 45,740
8. clockwatc... 30,424
9. ahoffmann 29,519
10. teraplane 29,380
11. kawas 27,030
12. ravenpl 24,800
13. omarfarid 21,868
14. SmartIntel 21,140
15. oleber 18,950
16. marchent 17,990
17. suhasbha... 17,320
18. ddrudik 14,250
19. nognew 13,250
20. MadShiva 12,300
21. nixfreak 12,200
22. caterham... 11,000
23. hernst42 10,080
24. agriesser 10,000
25. sentner 9,648

1. ozo 3,750,786
2. Adam314 1,731,503
3. Tintin 767,155
4. kandura 579,965
5. mjcoyne 521,466
6. jmcg 517,810
7. FishMonger 493,691
8. maneshr 385,976
9. teraplane 373,588
10. manav_m... 338,348
11. clockwatc... 246,712
12. ahoffmann 215,082
13. rj2 211,481
14. davorg 153,165
15. Tim_Utsc... 113,107
16. shlomoy 109,110
17. gripe 98,559
18. suhasbha... 92,720
19. Perl_Diver 82,106
20. hielo 80,720
21. sstouk 74,470
22. nedfine 73,307
23. jhurst 72,319
24. rugdog 70,951
25. ZiaTioN 66,995

09.09.2008 at 12:31AM PDT, ID: 23714572

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.7

what does it mean hardcoded the "From, To and Subject" headers in a guestbook program to keep spammer out.

Asked by QUESTOMNI in Perl Programming Language, CGI Scripting

what does it mean hardcoded the "From, To and Subject" headers in a guestbook program to keep spammer out.
#############################################################>>>>>>>>>>>>>>>
I read:
When building form-to-mail programs, you need to take precautions to prevent spammers from hijacking your programs to send unwanted e-mail to other recipients. They can do this by writing their own form (or program) to send data to your CGI. If your program prints any of the form fields as mail headers without checking them first, the spammer can insert their own mail headers (and even their own message). The end result: your program becomes a relay for spammers.

The primary defense against this is to not allow the form to specify ANY of the mail headers (such as the From, To, or Subject headers). Note that in our guestbook program, the From, To and Subject headers were all hardcoded in the program.
#############################################################>>>>>>>>>>>>>>>

I've had it happen before. What does this mean "hardcoded" and how can I stop SPAMMERS?
Start Free Trial

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:

           
           
             ########## THIS WAS THE BASIC GUESTBOOK USED #########>>>>>>>>>>>>>>>
 
<form action="post.cgi" method="POST">
Your Name: <input type="text" name="name"><br>
Email Address: <input type="text" name="email"><br>
Comments:<br>
<textarea name="comments" rows="5" 
   cols="60"></textarea><br>
<input type="submit" value="Send">
</form>
 
 
############# SEND MAIL SECTION OF CGI ##############>>>>>>>>>>>>>>>
 
sub sendmail {
    my ($from, $to, $subject, $message) = @_;
    $ENV{PATH} = "/usr/sbin";
    open (MAIL, "|/usr/sbin/sendmail -oi -t") or 
        &dienice("Can't fork for sendmail: $!\n");
    print MAIL "To: $to\n";
    print MAIL "From: $from\n";
    print MAIL "Subject: $subject\n\n";
    print MAIL "$message\n";
    close(MAIL);
}

           
         

Keywords: what does it mean hardcoded the "Fr…

	Title
1	spammers
2	How do I locate an internal spammer /…
3	Trace 'nobody' SPAMMER
4	Spammer?
5	Help! Computer hijacked by spammer!
6	kill the spammers

Loading Advertisement...

20080716-EE-VQP-32 / EE_QW_2_20070628

what does it mean hardcoded the "From, To and Subject" headers in a guestbook program to keep spammer out.

Asked by QUESTOMNI in Perl Programming Language, CGI Scripting

About this solution