[9999]

Form mail script

PHP Code:

<?

///////////////////////////////////////////////////////////////////

// PERFECT //

// ------- //

// PHP E-mail Receive Form Electronic Content Text //

// File: feedback.php //

// Version: 1.6 (April 2, 2004) //

// Description: Processes a web form to read the user input and //

// then send the data to a predefined recipient. You are //

// free to use and modify this script as you like. //

// Instructions: Go to "http://www.centerkey.com/php". //

// //

// Center Key Software * www.centerkey.com * Dem T. Pilafian //

///////////////////////////////////////////////////////////////////



// Configuration Settings

$SendFrom = "Form Feedback <feedback@yourdomain.com>";

$SendTo = "feedback@yourdomain.com";

$SubjectLine = "Feedback Submission";

$ThanksURL = "thanks.html"; //confirmation page

$Divider = "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~";



// Build Message Body from Web Form Input

$MsgBody = @gethostbyaddr($_SERVER["REMOTE_ADDR"]) . "\n$Divider\n";

foreach ($_POST as $Field=>$Value)

$MsgBody .= "$Field: $Value\n";

$MsgBody .= "$Divider\n" . $_SERVER["HTTP_USER_AGENT"] . "\n";

$MsgBody = htmlspecialchars($MsgBody); //make content safe



// Send E-Mail and Direct Browser to Confirmation Page

mail($SendTo, $SubjectLine, $MsgBody, "From: $SendFrom");

header("Location: $ThanksURL");

?>

1) If I want the $SendFrom line to display the actual name and email the user submits in a form, why wouldn't this work

PHP Code:

$SendFrom =    'Form Mail - '.$_POST['Name']. '<' . $POST['Email'] . '>'; 

I want it to look like this: Form Mail - John Doe <jonhndoe@hotmail.com> for example.

2) Is this script pretty secure for a form mail? If not, what suggestions do you have?

[Nico]

Originally Posted by 9999

why wouldn't this work

PHP Code:

$SendFrom =    'Form Mail - '.$_POST['Name']. '<' . $POST['Email'] . '>'; 

Since you don't tell us what exactly doesn't work, can I only guess. But this:

PHP Code:

$POST['Email'] 

Should be this:

PHP Code:

$_POST['Email'] 

[9999]

Thanks. I overlooked that.