Computer e Web .net

Ecco il famoso modulo contatti, in cgi-perl.
Per vedere l’anteprima clicca qui
E’ composto da un file denominato FormMail.pl da inserire rigorosamente nella cartella cgi-bin del vostro hosting e dal codice html da copiare nella pagina in cui volete che compaia.
Contenuto del codice FormMail.pl:
#!/usr/bin/perl -wT<br /> #<br /> # $Id: FormMail.pl,v 2.20 2002/11/21 06:39:42 nickjc Exp $<br /> #</p> <p>use strict;<br /> use POSIX qw(locale_h strftime);<br /> use Text::Wrap;              # Er for wrapping <img src='http://www.computereweb.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br /> use Socket;                  # for the inet_aton()<br /> use CGI qw(:standard);<br /> use vars qw(<br /> $DEBUGGING $emulate_matts_code $secure<br /> $allow_empty_ref $max_recipients $mailprog @referers<br /> @allow_mail_to @recipients %recipient_alias<br /> @valid_ENV $date_fmt $style $send_confirmation_mail<br /> $confirmation_text $locale $charset $no_content<br /> $double_spacing $wrap_text $wrap_style $postmaster<br /> );</p> <p># INFORMAZIONI SUL PROGRAMMA<br /> # ————————–<br /> # FormMail.pl $Revision: 2.20 $<br /> #<br /> # Questo programma è concesso in licenza nello stesso modo del Perl.<br /> # Siete liberi di scegliere tra la licenza pubblica di GNU,<br /> # vedi <<a href="http://www.gnu.org/licenses/gpl.html" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.gnu.org']);">http://www.gnu.org/licenses/gpl.html</a>>  oppure la licenza<br /> # artistica <<a href="http://www.perl.com/pub/a/language/misc/Artistic.html" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.perl.com']);">http://www.perl.com/pub/a/language/misc/Artistic.html</a>><br /> #<br /> # Per l’aiuto sulla configurazione o installazione fare riferimento<br /> # al file LEGGIMI oppure alla documentazione POD situata alla<br /> # fine di questa pagina.<br /> #</p> <p># SESSIONE DI CONFIGURAZIONE DELL’UTENTE  << INIZIO >><br /> # —————————————————-<br /> # Personalizzare i seguenti parametri con le proprie impostazioni.<br /> # Se non si possiedono i permessi per amministrare il server web,<br /> # contattare il proprio provider (amministratore del server web).<br /> # Per ulteriori chiarimenti si prega di consultare il file LEGGIMI.<br /> #<br /> BEGIN<br /> {<br /> $DEBUGGING         = 1;<br /> $emulate_matts_code= 0;<br /> $secure            = 1;<br /> $allow_empty_ref   = 1;<br /> $max_recipients    = 5;<br /> $mailprog          = ‘/usr/lib/sendmail -oi -t’;<br /> $postmaster        = ”;<br /> @referers          = qw(<a href="http://www.computereweb.net" >www.computereweb.net</a> dave.org.uk 209.207.222.64 localhost);<br /> @allow_mail_to     = qw(<a href="mailto:info@computereweb.net">info@computereweb.net</a> <a href="mailto:you@your.domain">you@your.domain</a> <a href="mailto:some.one.else@your.domain">some.one.else@your.domain</a> localhost);<br /> @recipients        = ();<br /> %recipient_alias   = ();<br /> @valid_ENV         = qw(REMOTE_HOST REMOTE_ADDR REMOTE_USER HTTP_USER_AGENT);<br /> $locale            = ”;<br /> $charset           = ‘iso-8859-1′;<br /> $date_fmt          = ‘%A, %B %d, %Y at %H:%M:%S’;<br /> $style             = ‘/css/nms.css’;<br /> $no_content        = 0;<br /> $double_spacing    = 1;<br /> $wrap_text         = 0;<br /> $wrap_style        = 1;<br /> $send_confirmation_mail = 0;<br /> $confirmation_text = <<’END_OF_CONFIRMATION’;<br /> From: <a href="mailto:you@your.com">you@your.com</a><br /> Subject: form submission</p> <p>Thank you for your form submission.</p> <p>END_OF_CONFIRMATION</p> <p>#<br /> # CONFIGURAZIONE DELL’UTENTE << FINE >><br /> # —————————-<br /> # (Non apportare modifiche al di sotto di questa linea)<br /> #</p> <p>use vars qw($VERSION);<br /> $VERSION = substr q$Revision: 2.20 $, 10, -1;</p> <p># Merge @allow_mail_to and @recipients into a single list of regexps,<br /> # automatically adding any recipients in %recipient_alias.<br /> push @allow_mail_to,<br /> grep( <a>/@/</a>, split(/\s*,\s*/, join ‘,’, values %recipient_alias) );<br /> push @recipients, map { /\@/ ? “^\Q$_\E\$” : “\@\Q$_\E\$” } @allow_mail_to;</p> <p>$secure = 0 if $emulate_matts_code;</p> <p>use vars qw(%valid_ENV);<br /> @valid_ENV{@valid_ENV} = (1) x @valid_ENV;</p> <p>use vars qw($style_element);<br /> $style_element = $style ?<br /> qq%<link rel=”stylesheet” type=”text/css” href=”$style” />%<br /> : ”;</p> <p>if ($mailprog =~ /^SMTP:/i) {<br /> require IO::Socket;<br /> import IO::Socket;<br /> }<br /> }</p> <p>use vars qw($done_headers $hide_recipient $debug_warnings);<br /> $done_headers   = 0;<br /> $hide_recipient = 0;<br /> $debug_warnings = ”;</p> <p>sub html_header {<br /> if ($CGI::VERSION >= 2.57) {<br /> # This is the correct way to set the charset<br /> print header(‘-type’=>’text/html’, ‘-charset’=>$charset);<br /> }<br /> else {<br /> # However CGI.pm older than version 2.57 doesn’t have the<br /> # -charset option so we cheat:<br /> print header(‘-type’ => “text/html; charset=$charset”);<br /> }<br /> }</p> <p># We need finer control over what gets to the browser and the CGI::Carp<br /> # set_message() is not available everywhere <img src='http://www.computereweb.net/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /><br /> # This is basically the same as what CGI::Carp does inside but simplified<br /> # for our purposes here.</p> <p>BEGIN<br /> {<br /> sub fatalsToBrowser<br /> {<br /> my ( $message ) = @_;</p> <p>if ( $DEBUGGING )<br /> {<br /> $message =~ s/</&lt;/g;<br /> $message =~ s/>/&gt;/g;<br /> }<br /> else<br /> {<br /> $message = ”;<br /> }</p> <p>my ( $pack, $file ) = caller(0);</p> <p>return undef if $file =~ /^\(eval/;<br /> $charset = ‘iso-8859-1′ unless $charset;</p> <p>html_header() unless $done_headers;</p> <p>print <<EOERR;<br /> <?xml version=”1.0″ encoding=”$charset”?><br /> <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN”<br /> “<a href="http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd</a>“><br /> <html xmlns=”<a href="http://www.w3.org/1999/xhtml" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/1999/xhtml</a>“><br /> <head><br /> <title>Error</title><br /> </head><br /> <body><br /> <h1>Application Error</h1><br /> <p><br /> An error has occurred in the program<br /> </p><br /> <p><br /> $message<br /> </p><br /> </body><br /> </html><br /> EOERR<br /> die @_;<br /> };</p> <p># Don’t stomp on global SIG{__DIE__} if we’re sharing an<br /> # interpreter under Apache::Registry<br /> unless (exists $ENV{MOD_PERL}) {<br /> $SIG{__DIE__} = \&fatalsToBrowser;<br /> }<br /> }<br /> local $SIG{__DIE__} = \&fatalsToBrowser;<br /> # We don’t need file uploads or very large POST requests.<br /> # Annoying locution to shut up ‘used only once’ warning in<br /> # older perl.  Localize these to avoid stomping on other<br /> # scripts that need file uploads under Apache::Registry.</p> <p>local ($CGI::DISABLE_UPLOADS, $CGI::POST_MAX);<br /> $CGI::DISABLE_UPLOADS = 1;<br /> $CGI::POST_MAX        = 1000000;<br /> # Empty the environment of potentially harmful variables,<br /> # and detaint the path.  We accept anything in the path<br /> # because $ENV{PATH} is trusted for a CGI script, and in<br /> # general we have no way to tell what should be there.</p> <p>delete @ENV{qw(IFS CDPATH ENV BASH_ENV)};<br /> $ENV{PATH} =~ /(.*)/ and $ENV{PATH} = $1;<br /> use vars qw(%Config %Form);<br /> %Config = ();<br /> %Form = ();</p> <p>check_url();</p> <p>eval<br /> {<br /> setlocale(LC_TIME, $locale) if $locale;<br /> };</p> <p>my $date = strftime($date_fmt, localtime);</p> <p>my @Field_Order = parse_form();</p> <p>check_required();</p> <p>send_mail($date, [@Field_Order]);</p> <p>if ( $no_content ) {<br /> print header(-Status => 204);<br /> }<br /> else {<br /> return_html($date, [@Field_Order]);<br /> }</p> <p>sub check_url {<br /> if ( scalar(@referers) and not check_referer(referer()) ) {<br /> error(‘bad_referer’);<br /> }<br /> }</p> <p>sub check_referer<br /> {<br /> my $check_referer;<br /> my ($referer) = @_;</p> <p>unless ($referer) {<br /> return 1 if $allow_empty_ref or !$secure;<br /> }</p> <p>if ($referer && ($referer =~ m!^https?://([^/]*\@)?([\w\-\.]+)!i)) {<br /> my $refHost;</p> <p>$refHost = $2;</p> <p>foreach my $test_ref (@referers) {<br /> if ($refHost =~ m|\Q$test_ref\E$|i) {<br /> $check_referer = 1;<br /> last;<br /> }<br /> elsif ( $secure && $test_ref =~ /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/ ) {<br /> if ( my $ref_host = inet_aton($refHost) ) {<br /> $ref_host = unpack “l”, $ref_host;<br /> if ( my $test_ref_ip = inet_aton($test_ref) ) {<br /> $test_ref_ip = unpack “l”, $test_ref_ip;<br /> if ( $test_ref_ip == $ref_host ) {<br /> $check_referer = 1;<br /> last;<br /> }<br /> }<br /> }<br /> }<br /> }<br /> } else {<br /> return 0;<br /> }</p> <p>return $check_referer;<br /> };</p> <p>sub parse_form {</p> <p>my @fields = qw(<br /> recipient<br /> subject<br /> email<br /> realname<br /> redirect<br /> bgcolor<br /> background<br /> link_color<br /> vlink_color<br /> text_color<br /> alink_color<br /> title<br /> sort<br /> print_config<br /> required<br /> env_report<br /> return_link_title<br /> return_link_url<br /> print_blank_fields<br /> missing_fields_redirect<br /> );</p> <p>@Config{@fields} = (undef) x @fields; # make it undef rather than empty string</p> <p>my @field_order;</p> <p>foreach (param()) {<br /> if (exists $Config{$_}) {<br /> my $val = strip_nonprintable(param($_));<br /> next if /redirect$/ and not check_url_valid($val);<br /> next if /^return_link_url$/ and $secure and not check_url_valid($val);<br /> $Config{$_} = $val;<br /> $Form{$_} = $val unless $emulate_matts_code;<br /> } else {<br /> my @vals = map {strip_nonprintable($_)} param($_);<br /> my $key = strip_nonprintable($_);<br /> $Form{$key} = join ‘ ‘, @vals;<br /> push @field_order, $key;<br /> }<br /> }</p> <p>foreach (qw(required env_report print_config)) {<br /> if ($Config{$_}) {<br /> $Config{$_} =~ s/(\s+|\n)?,(\s+|\n)?/,/g;<br /> $Config{$_} =~ s/(\s+)?\n+(\s+)?//g;<br /> $Config{$_} = [split(/,/, $Config{$_})];<br /> } else {<br /> $Config{$_} = [];<br /> }<br /> }</p> <p>$Config{env_report} = [ grep { $valid_ENV{$_} } @{$Config{env_report}} ];</p> <p>if (defined $Config{’sort’}) {<br /> if ($Config{’sort’} eq ‘alphabetic’) {<br /> @field_order = sort @field_order;<br /> } elsif ($Config{’sort’} =~ /^\s*order:\s*(.*)$/s) {<br /> @field_order = split /\s*,\s*/, $1;<br /> }<br /> }</p> <p>return @field_order;<br /> }</p> <p>sub check_required {<br /> my ($require, @error);</p> <p>defined $Config{subject} or $Config{subject} = ”;<br /> defined $Config{recipient} or $Config{recipient} = ”;<br /> $Config{subject}   =~ s/[\r\n]+/ /g;<br /> $Config{recipient} =~ s/[\r\n]+/ /g;</p> <p>if (length $Config{recipient}) {<br /> my (@valid, @recip);</p> <p>foreach (split /\s*,\s*/, $Config{recipient}) {<br /> if (exists $recipient_alias{$_}) {<br /> push @recip, split /\s*,\s*/, $recipient_alias{$_};<br /> $hide_recipient = 1;<br /> }<br /> else {<br /> push @recip, $_;<br /> }<br /> }</p> <p>foreach (@recip) {<br /> next unless check_email($_);</p> <p>if (check_recipient($_)) {<br /> push @valid, $_;<br /> }<br /> }</p> <p>error(‘no_recipient’) unless scalar @valid;<br /> if ($max_recipients > 0 and not $emulate_matts_code) {<br /> error(‘too_many_recipients’) if scalar @valid > $max_recipients;<br /> }<br /> $Config{recipient} = join ‘,’, @valid;</p> <p>} else {<br /> my @allow = grep {/\@/} @allow_mail_to;<br /> if (scalar @allow > 0 and not $emulate_matts_code) {<br /> $Config{recipient} = $allow[0];<br /> $hide_recipient = 1;<br /> } else {<br /> error(‘no_recipient’)<br /> }<br /> }</p> <p>if ($secure and (! defined(request_method()) || request_method() ne ‘POST’)) {<br /> error(‘bad_method’);<br /> }</p> <p>foreach (@{$Config{required}}) {<br /> if ($_ eq ‘email’ && !check_email($Config{$_})) {<br /> push(@error, $_);<br /> } elsif (defined($Config{$_})) {<br /> push(@error, $_) unless length $Config{$_};<br /> } else {<br /> push(@error,$_) unless defined $Form{$_} and length $Form{$_};<br /> }<br /> }</p> <p>error(‘missing_fields’, @error) if @error;<br /> }</p> <p>sub check_recipient {<br /> my ($recip) = @_;</p> <p>foreach my $r (@recipients) {<br /> if ( ($recip =~ /(?:$r)$/) or $emulate_matts_code and ($recip =~ /$r/i) ) {<br /> return(1);<br /> }<br /> }</p> <p>warn_bad_email($recip, “script not configured to allow this address”);<br /> return(0);<br /> }</p> <p>sub return_html {<br /> my ($date, $Field_Order) = @_;</p> <p>if ($Config{‘redirect’}) {<br /> print redirect $Config{‘redirect’};<br /> } else {<br /> html_header();<br /> $done_headers = 1;</p> <p>my $title = escape_html( $Config{‘title’} || ‘LACINETECA.TK’ );<br /> my $torecipient = ‘to ‘ . escape_html($Config{‘recipient’});<br /> $torecipient = ” if $hide_recipient;<br /> my $attr = body_attributes(); # surely this should be done with CSS</p> <p>print <<EOHTML;<br /> <?xml version=”1.0″ encoding=”$charset”?><br /> <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN”<br /> “<a href="http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd</a>“><br /> <html xmlns=”<a href="http://www.w3.org/1999/xhtml" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/1999/xhtml</a>“><br /> <head><br /> <title>$title</title><br /> $style_element<br /> <style><br /> h1.title {<br /> text-align : center;<br /> }<br /> </style><br /> </head><br /> <body $attr>$debug_warnings<br /> <h1 class=”title”>$title</h1><br /> <p>Di seguito è riportato ciò che hai presentato a $torecipient on $date</p><br /> <p><hr size=”1″ width=”75%” /></p><br /> EOHTML</p> <p>foreach (@$Field_Order) {<br /> my $val = (defined $Form{$_} ? $Form{$_} : ”);<br /> if ($Config{print_blank_fields} || $val !~ /^\s*$/) {<br /> print ‘<p><b>’, escape_html($_), ‘:</b> ‘,<br /> escape_html($val), “</p>\n”;<br /> }<br /> }</p> <p>print qq{<p><hr size=”1″ width=”75%” /></p>\n};</p> <p>if ($Config{return_link_url} && $Config{return_link_title}) {<br /> print “<ul>\n”;<br /> print ‘<li><a href=”‘, escape_html($Config{return_link_url}),<br /> ‘”>’, escape_html($Config{return_link_title}), “</a>\n”;<br /> print “</li>\n</ul>\n”;<br /> }</p> <p>print <<END_HTML_FOOTER;<br /> <hr size=”1″ width=”75%” /><br /> <p align=”center”><br /> <font size=”-1″><br /> <a href=”<a href="http://nms-cgi.sourceforge.net/">FormMail</a" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','nms-cgi.sourceforge.net']);">http://nms-cgi.sourceforge.net/”>FormMail</a</a>><br /> &copy; 2001  London Perl Mongers<br /> </font><br /> </p><br /> </body><br /> </html><br /> END_HTML_FOOTER<br /> }<br /> }</p> <p>sub send_mail {<br /> my ($date, $Field_Order) = @_;</p> <p>my $dashes = ‘-’ x 75;</p> <p>my $realname = $Config{realname};<br /> if (defined $realname) {<br /> $realname = ‘ (‘ . cleanup_realname($realname) . ‘)’;<br /> } else {<br /> $realname = $Config{realname} = ”;<br /> }</p> <p>my $subject = $Config{subject} || ‘WWW Form Submission’;<br /> if ($secure) {<br /> $subject = substr($subject, 0, 256);<br /> }</p> <p>my $email = $Config{email};<br /> unless (defined $email and check_email($email)) {<br /> $email = ‘nobody’;<br /> }</p> <p>if (“$Config{recipient}$email$realname$subject” =~ /\r|\n/) {<br /> die ‘multiline variable in mail header, unsafe to continue’;<br /> }</p> <p>my $xheader = ”;</p> <p># This is more lenient than that in check_referer() because we<br /> # want to know how people got this far if they are faking it<br /> # however it is probably prudent to restrict to the characters<br /> # valid in a URL – or what ?</p> <p>if ( $secure and defined (my $referer = referer()) ) {<br /> if ( $referer =~ /([\d\w.:@&%\/;?,-]{1,128})/ ) {<br /> $xheader .= “X-HTTP-Referer: [$1]\n”;<br /> }<br /> }</p> <p># however if remote_addr() is not pukka then something<br /> # really bad is going on here.</p> <p>if ( $secure and defined (my $addr = remote_addr()) ) {<br /> $addr =~ /^\[?([\d\.]+)\]?$/ or die “bad remote addr [$addr]“;</p> <p>$addr = $1;</p> <p># The actual name of the program could be useful if there is<br /> # more than one FormMail on the machine with different names.</p> <p>my ( $realagent ) = $0 =~ m%([\d\w.]+)$%;<br /> $realagent = defined $realagent ? “($realagent)” : ”;<br /> $xheader .= “X-HTTP-Client: [$addr]\n”<br /> . “X-Mailer: NMS FormMail.pl $realagent v$VERSION”<br /> . “[http://nms-cgi.sourceforge.net/]\n”;<br /> }</p> <p>if ( $send_confirmation_mail and $email =~ /\@/ ) {<br /> email_start($postmaster, $email);<br /> email_data($xheader . “To: $email$realname\n$confirmation_text”);<br /> email_end();<br /> }</p> <p>email_start( $postmaster, split(/\s*,\s*/, $Config{recipient}) );</p> <p>email_data($xheader . <<EOMAIL);<br /> To: $Config{recipient}<br /> From: $email$realname<br /> Subject: $subject</p> <p>Below is the result of your feedback form.  It was submitted by<br /> $Config{realname} (${\( $Config{email}||” )}) on $date<br /> $dashes<br /> EOMAIL</p> <p>email_data(“\n\n”) if $double_spacing;<br /> my $nl = ( $double_spacing ? “\n\n” : “\n” );</p> <p>if ($Config{print_config}) {<br /> foreach (@{$Config{print_config}}) {<br /> email_data(“$_: $Config{$_}$nl”) if $Config{$_};<br /> }<br /> }</p> <p>foreach (@{$Field_Order}) {<br /> my $val = (defined $Form{$_} ? $Form{$_} : ”);<br /> if ($Config{‘print_blank_fields’} || $val !~ /^\s*$/) {<br /> my $field_name = “$_: “;<br /> if ( $wrap_text and length(“$field_name$val”) > 72 ) {<br /> my $subs_indent = ”;<br /> if ( $wrap_style == 1 ) {<br /> $subs_indent = ‘ ‘ x length($field_name);<br /> }<br /> $Text::Wrap::columns = 72;<br /> my $wraped;<br /> eval { local $SIG{__DIE__} ; $wraped = wrap($field_name,$subs_indent,$val) };<br /> email_data( ($@ ? “$field_name$val” : $wraped) . $nl );<br /> }<br /> else {<br /> email_data(“$field_name$val$nl”);<br /> }<br /> }<br /> }</p> <p>email_data(“$dashes\n\n”);</p> <p>foreach (@{$Config{env_report}}) {<br /> email_data(“$_: ” . strip_nonprintable($ENV{$_}) . “\n”) if $ENV{$_};<br /> }</p> <p>email_end();<br /> }</p> <p>use vars qw($smtp);<br /> sub email_start {<br /> my ($sender, @recipients) = @_;</p> <p>if ($mailprog =~ /^SMTP:([\w\-\.]+(:\d+)?)$/i) {<br /> my $mailhost = $1;<br /> $mailhost .= ‘:25′ unless $mailhost =~ /:/;<br /> $smtp = IO::Socket::INET->new($mailhost);<br /> defined $smtp or die “SMTP connect to [$mailhost]: $!”;</p> <p>my $banner = smtp_getline();<br /> $banner =~ /^2/ or die “bad SMTP banner [$banner] from [$mailhost]“;</p> <p>my $helohost = ($ENV{SERVER_NAME} =~ /^([\w\-\.]+)$/ ? $1 : ‘.’);<br /> smtp_command(“HELO $helohost”);<br /> smtp_command(“MAIL FROM: <$sender>”);<br /> foreach my $r (@recipients) {<br /> smtp_command(“RCPT TO: <$r>”);<br /> }<br /> smtp_command(“DATA”, ‘3′);<br /> }<br /> else {<br /> my $command = $mailprog;<br /> $command .= qq{ -f “$postmaster”} if $postmaster;<br /> my $result;<br /> eval { local $SIG{__DIE__};<br /> $result = open SENDMAIL, “| $command”<br /> };<br /> if ($@) {<br /> die $@ unless $@ =~ /Insecure directory/;<br /> delete $ENV{PATH};<br /> $result = open SENDMAIL, “| $command”;<br /> }</p> <p>die “Can’t open mailprog [$command]\n” unless $result;<br /> }<br /> }</p> <p>sub email_data {<br /> my ($data) = @_;</p> <p>if (defined $smtp) {<br /> $data =~ s#\n#\015\012#g;<br /> $data =~ s#^\.#..#mg;<br /> $smtp->print($data) or die “write to SMTP server: $!”;<br /> } else {<br /> print SENDMAIL $data or die “write to sendmail pipe: $!”;<br /> }<br /> }</p> <p>sub email_end {<br /> if (defined $smtp) {<br /> smtp_command(“.”);<br /> smtp_command(“QUIT”);<br /> undef $smtp;<br /> } else {<br /> close SENDMAIL or die “close sendmail pipe failed, mailprog=[$mailprog]“;<br /> }<br /> }</p> <p>sub smtp_command {<br /> my ($cmd, $want) = @_;<br /> defined $want or $want = ‘2′;</p> <p>$smtp->print(“$cmd\015\012″)<br /> or die “write [$cmd] to SMTP server: $!”;</p> <p>my $resp = smtp_getline();<br /> unless (substr($resp, 0, 1) eq $want) {<br /> die “SMTP command [$cmd] gave response [$resp]“;<br /> }<br /> }</p> <p>sub smtp_getline {<br /> my $line = <$smtp>;<br /> defined $line or die “read from SMTP server: $!”;<br /> $line =~ tr#\012\015##d;<br /> return $line;<br /> }</p> <p>sub cleanup_realname {<br /> my ($realname) = @_;</p> <p>return ” unless defined $realname;</p> <p>$realname =~ s#\s+# #g;</p> <p>if ($secure) {<br /> # Allow no unusual characters and impose a length limit. We<br /> # need to allow extended ASCII characters because they can<br /> # occur in non-English names.<br /> $realname =~ tr# a-zA-Z0-9_\-,./’\200-\377# #cs;<br /> $realname = substr $realname, 0, 128;<br /> } else {<br /> # Be as generous as possible without opening any known or<br /> # strongly suspected relaying holes.<br /> $realname =~ tr#()\\#{}/#;<br /> }</p> <p>return $realname;<br /> }</p> <p>sub check_email {<br /> my ($email) = @_;</p> <p>return 0 if $email =~ /^\s*$/;</p> <p>unless ($email =~ /^(.+)\@([a-z0-9_\.\-\[\]]+)$/is) {<br /> warn_bad_email($email, “malformed email address”);<br /> return 0;<br /> }<br /> my ($user, $host) = ($1, $2);</p> <p>if ($host =~ /\.\./) {<br /> warn_bad_email($email, “hostname $host contains ‘..’”);<br /> return 0;<br /> } elsif ($host =~ /^\./) {<br /> warn_bad_email($email, “hostname $host starts with ‘.’”);<br /> return 0;<br /> } elsif ($host =~ /\.$/) {<br /> warn_bad_email($email, “hostname $host ends with ‘.’”);<br /> return 0;<br /> }</p> <p>if ($emulate_matts_code and not $secure) {<br /> # Be as generous as possible without opening any known or strongly<br /> # suspected relaying holes.<br /> if ($user =~ /([^a-z0-9_\-\.\#\$\&\'\*\+\/\=\?\^\`\{\|\}\~\200-\377])/i) {<br /> my $c = sprintf ‘%s (ASCII 0x%.2X)’, $1, unpack(‘C’,$1);<br /> warn_bad_email($email, “bad character $c”);<br /> return 0;<br /> } else {<br /> return 1;<br /> }<br /> } else {<br /> # Only allow reasonable email addresses.</p> <p>if ($user =~ /([^a-z0-9_\-\.\*\+\=])/i) {<br /> my $c = sprintf ‘%s (ASCII 0x%.2X)’, $1, unpack(‘C’,$1);<br /> warn_bad_email($email, “bad character $c”);<br /> return 0;<br /> } elsif (length $user > 100) {<br /> warn_bad_email($email, “username part too long”);<br /> return 0;<br /> }</p> <p>if (length $host > 100) {<br /> warn_bad_email($email, “hostname too long”);<br /> return 0;<br /> }<br /> return 1 if $host =~ /^\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]$/;<br /> return 1 if $host =~ /^[a-z0-9\-\.]+$/i;</p> <p>warn_bad_email($email, “invalid hostname $host”);<br /> return 0;<br /> }</p> <p># not reached<br /> return 0;<br /> }</p> <p>sub warn_bad_email {<br /> my ($email, $whybad) = @_;</p> <p>$debug_warnings .= <<END if $DEBUGGING;<br /> <p><br /> <font color=”red”>Warning:</font><br /> The email address <tt>${\( escape_html($email) )}</tt> was rejected<br /> for the following reason: ${\( escape_html($whybad) )}<br /> </p><br /> END<br /> }</p> <p># check the validity of a URL.</p> <p>sub check_url_valid {<br /> my $url = shift;</p> <p># allow relative URLs with sane values<br /> return 1 if $url =~ m#^[a-z0-9_\-\.\,\+\/]+$#i;</p> <p>$url =~ m< ^ (?:ftp|http|https):// [\w\-\.]+ (?:\:\d+)?<br /> (?: /  [\w\-.!~*'(|);/\@+\$,%#]*   )?<br /> (?: \? [\w\-.!~*'(|);/\@&=+\$,%#]* )?<br /> $<br /> >x ? 1 : 0;<br /> }</p> <p>sub strip_nonprintable {<br /> my $text = shift;<br /> return ” unless defined $text;<br /> if ($charset =~ /^iso-8859/i)<br /> {<br /> # None of the the iso-8859-* charsets have printable<br /> # characters between \200 and \241.  See<br /> # <a href="http://czyborra.com/charsets/iso8859.html" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','czyborra.com']);">http://czyborra.com/charsets/iso8859.html</a><br /> $text=~ tr#\t\n\040-\176\241-\377# #cs;<br /> }<br /> elsif ($charset =~ /^utf-8$/i)<br /> {<br /> # The bytes 0xFE and 0xFF are illegal in UTF-8, see<br /> # <a href="http://www.cl.cam.ac.uk/~mgk25/unicode.html#utf-8" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.cl.cam.ac.uk']);">http://www.cl.cam.ac.uk/~mgk25/unicode.html#utf-8</a><br /> $text=~ tr#\t\n\040-\176\200-\375# #cs;<br /> }<br /> else<br /> {<br /> $text=~ tr#\t\n\040-\176\200-\377# #cs;<br /> }<br /> return $text;<br /> }</p> <p>sub body_attributes {<br /> my %attrs = (bgcolor     => ‘bgcolor’,<br /> background  => ‘background’,<br /> link_color  => ‘link’,<br /> vlink_color => ‘vlink’,<br /> alink_color => ‘alink’,<br /> text_color  => ‘text’);</p> <p>my $attr = ”;</p> <p>foreach (keys %attrs) {<br /> next unless $Config{$_};<br /> if (/color$/) {<br /> next unless $Config{$_} =~ /^(?:#[0-9a-z]{6}|[\w\-]{2,50})$/i;<br /> } elsif ($_ eq ‘background’) {<br /> next unless check_url_valid($Config{$_});<br /> } else {<br /> die “no check defined for body attribute [$_]“;<br /> }<br /> $attr .= qq( $attrs{$_}=”) . escape_html($Config{$_}) . ‘”‘ if $Config{$_};<br /> }</p> <p>return $attr;<br /> }</p> <p>sub error {<br /> my ($error, @error_fields) = @_;<br /> my ($host, $missing_field, $missing_field_list);</p> <p>my ($title, $error_body);</p> <p>if ($error eq ‘bad_referer’) {<br /> my $referer = referer();<br /> $referer = ” if ! defined( $referer );<br /> my $escaped_referer = escape_html($referer);</p> <p>if ( $referer =~ m|^https?://([\w\.\-]+)|i) {<br /> $host = $1;<br /> $title = ‘Bad Referrer – Access Denied’;<br /> $error_body =<<EOBODY;<br /> <p><br /> The form attempting to use FormMail resides at <tt>$escaped_referer</tt>,<br /> which is not allowed to access this program.<br /> </p><br /> <p><br /> If you are attempting to configure FormMail to run with this form,<br /> you need to add the following to \@referers, explained in detail in the<br /> README file.<br /> </p><br /> <p><br /> Add <tt>’$host’</tt> to your <tt><b>\@referers</b></tt> array.<br /> </p><br /> EOBODY<br /> } elsif (length $referer) {<br /> $title = ‘Malformed Referrer – Access Denied’;<br /> $error_body =<<EOBODY;<br /> <p><br /> The referrer value <tt>$escaped_referer</tt> cannot be parsed, so<br /> it is not possible to check that the referring page is allowed to<br /> access this program.<br /> </p><br /> EOBODY<br /> } else {<br /> $title = ‘Missing Referrer – Access Denied’;<br /> $error_body =<<EOBODY;<br /> <p><br /> Your browser did not send a <tt>Referer</tt> header with this<br /> request, so it is not possible to check that the referring page<br /> is allowed to access this program.<br /> </p><br /> EOBODY<br /> }<br /> }<br /> elsif ($error eq ‘bad_method’) {<br /> my $ref = referer();<br /> if (defined $ref and $ref =~ m#^https?://#) {<br /> $ref = ‘at <tt>’ . escape_html($ref) . ‘</tt>’;<br /> } else {<br /> $ref = ‘that you just filled in’;<br /> }<br /> $title = ‘Error: GET request’;<br /> $error_body =<<EOBODY;<br /> <p><br /> The form $ref fails to specify the POST method, so it would not<br /> be correct for this script to take any action in response to<br /> your request.<br /> </p><br /> <p><br /> If you are attempting to configure this form to run with FormMail,<br /> you need to set the request method to POST in the opening form tag,<br /> like this:<br /> <tt>&lt;form action=&quot;/cgi-bin/FormMail.pl&quot; method=&quot;post&quot;&gt;</tt><br /> </p><br /> EOBODY<br /> } elsif ($error eq ‘no_recipient’) {</p> <p>my $recipient = escape_html($Config{recipient});<br /> $title = ‘Error: Bad or Missing Recipient’;<br /> $error_body =<<EOBODY;<br /> <p><br /> There was no recipient or an invalid recipient specified in the<br /> data sent to FormMail. Please make sure you have filled in the<br /> <tt>recipient</tt> form field with an e-mail address that has<br /> been configured in <tt>\@recipients</tt> or <tt>\@allow_mail_to</tt>.<br /> More information on filling in <tt>recipient/allow_mail_to</tt><br /> form fields and variables can be found in the README file.<br /> </p><br /> <hr size=”1″ /><br /> <p><br /> The recipient was: [ $recipient ]<br /> </p><br /> EOBODY<br /> }<br /> elsif ( $error eq ‘too_many_recipients’ ) {<br /> $title = ‘Error: Too many Recipients’;<br /> $error_body =<<EOBODY;<br /> <p><br /> The number of recipients configured in the form exceeds the<br /> maximum number of recipients configured in the script.  If<br /> you are attempting to configure FormMail to run with this form<br /> then you will need to increase the <tt>\$max_recipients</tt><br /> configuration setting in the script.<br /> </p><br /> EOBODY<br /> }<br /> elsif ( $error eq ‘missing_fields’ ) {<br /> if ( $Config{‘missing_fields_redirect’} ) {<br /> print  redirect($Config{‘missing_fields_redirect’});<br /> exit;<br /> }<br /> else {<br /> my $missing_field_list = join ”,<br /> map { ‘<li>’ . escape_html($_) . “</li>\n” }<br /> @error_fields;<br /> $title = ‘Error: Blank Fields’;<br /> $error_body =<<EOBODY;<br /> <p><br /> The following fields were left blank in your submission form:<br /> </p><br /> <div class=”c2″><br /> <ul><br /> $missing_field_list<br /> </ul><br /> </div><br /> <p><br /> These fields must be filled in before you can successfully<br /> submit the form.<br /> </p></p> <p><p><br /> Please use your back button to return to the form and<br /> try again.<br /> </p><br /> EOBODY<br /> }<br /> }</p> <p>html_header();<br /> $done_headers = 1;<br /> print <<END_ERROR_HTML;<br /> <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN”<br /> “<a href="http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd</a>“><br /> <html xmlns=”<a href="http://www.w3.org/1999/xhtml" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.w3.org']);">http://www.w3.org/1999/xhtml</a>“><br /> <head><br /> <title>$title</title><br /> $style_element<br /> <style type=”text/css”><br /> <!–<br /> body {<br /> background-color: #FFFFFF;<br /> color: #000000;<br /> }<br /> p.c2 {<br /> font-size: 80%;<br /> text-align: center;<br /> }<br /> th.c1 {<br /> text-align: center;<br /> font-size: 143%;<br /> }<br /> p.c3 {font-size: 80%; text-align: center}<br /> div.c2 {margin-left: 2em}<br /> –><br /> </style><br /> </head><br /> <body>$debug_warnings<br /> <table border=”0″ width=”600″ bgcolor=”#9C9C9C” summary=”"><br /> <tr bgcolor=”#9C9C9C”><br /> <th class=”c1″>$title</th><br /> </tr><br /> <tr bgcolor=”#CFCFCF”><br /> <td><br /> $error_body<br /> <hr size=”1″ /><br /> <p class=”c3″><br /> <a href=”<a href="http://nms-cgi.sourceforge.net/">FormMail</a" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','nms-cgi.sourceforge.net']);">http://nms-cgi.sourceforge.net/”>FormMail</a</a>><br /> &copy; 2001 London Perl Mongers<br /> </p><br /> </td><br /> </tr><br /> </table><br /> </body><br /> </html><br /> END_ERROR_HTML<br /> exit;<br /> }</p> <p>use vars qw(%escape_html_map);</p> <p>BEGIN<br /> {<br /> %escape_html_map = ( ‘&’ => ‘&amp;’,<br /> ‘<’ => ‘&lt;’,<br /> ‘>’ => ‘&gt;’,<br /> ‘”‘ => ‘&quot;’,<br /> “‘” => ‘&#39;’,<br /> );<br /> }</p> <p>sub escape_html {<br /> my $str = shift;</p> <p>my $chars = join ”, keys %escape_html_map;</p> <p>if (defined($str))<br /> {<br /> $str =~ s/([\Q$chars\E])/$escape_html_map{$1}/g;<br /> }</p> <p>return $str;<br /> }</p> <p># No __END__ here because that breaks under Apache::Registry</p> <p>=head1 COPYRIGHT</p> <p>FormMail $Revision: 2.20 $<br /> Copyright 2001 London Perl Mongers, All rights reserved</p> <p>=head1 LICENSE</p> <p>This script is free software; you are free to redistribute it<br /> and/or modify it under the same terms as Perl itself.</p> <p>=head1 URL</p> <p>The most up to date version of this script is available from the nms<br /> script archive at  E<lt>http://nms-cgi.sourceforge.net/E<gt></p> <p>=head1 SUMMARY</p> <p>formmail is a script which allows you to receive the results of an<br /> HTML form submission via an email message.</p> <p>=head1 FILES</p> <p>In this distribution, you will find the following files:</p> <p>=over</p> <p>=item FormMail.pl</p> <p>The main Perl script</p> <p>=item README</p> <p>This documentation. Instructions on how to install and use<br /> formmail</p> <p>=item EXAMPLES</p> <p>Some worked examples of ways to set up formmail</p> <p>=item ChangeLog</p> <p>The change history of these files</p> <p>=item MANIFEST</p> <p>List of files</p> <p>=back<br /> =head1 CONFIGURATION</p> <p>There are a number of variables that you can change in FormMail.pl which<br /> alter the way that the program works.</p> <p>=over</p> <p>=item $DEBUGGING</p> <p>This should be set to 1 whilst you are installing<br /> and testing the script. Once the script is live you<br /> should change it to 0. When set to 1, errors will<br /> be output to the browser. This is a security risk and<br /> should not be used when the script is live.</p> <p>=item $emulate_matts_code</p> <p>When this variable is set to a true value (e.g. 1)<br /> formmail will work in exactly the same way as its<br /> counterpart at Matt’s Script Archive. If it is set<br /> to a false value (e.g. 0) then more advanced features<br /> are switched on. We do not recommend changing this<br /> variable to 1, as the resulting drop in security<br /> may leave your formmail open to use as a SPAM relay.</p> <p>=item $secure</p> <p>When this variable is set to a true value (e.g. 1)<br /> many additional security features are turned on.  We<br /> do not recommend changing this variable to 0, as the<br /> resulting drop in security may leave your formmail<br /> open to use as a SPAM relay.</p> <p>=item $allow_empty_ref</p> <p>Some web proxies and office firewalls may strip<br /> certain headers from the HTTP request that is sent<br /> by a browser.  Among these is the HTTP_REFERER that<br /> the program uses as an additional check of the<br /> requests validity – this will cause the program to<br /> fail with a ‘bad referer’ message even though the<br /> configuration seems fine.  In these cases setting<br /> this variable to 1 will stop the program from<br /> complaining about requests where no referer header<br /> was sent while leaving the rest of the security<br /> features intact.</p> <p>=item $max_recipients</p> <p>The maximum number of e-mail addresses that any single<br /> form should be allowed to send copies of the e-mail to.<br /> If none of your forms send e-mail to more than one<br /> recipient, then we recommend that you improve the<br /> security of FormMail by reducing this value to 1.<br /> Setting this variable to 0 removes all limits on the<br /> number of recipients of each e-mail.</p> <p>=item $mailprog</p> <p>The system command that the script should invoke to<br /> send an outgoing email. This should be the full path<br /> to a program that will read a message from STDIN and<br /> determine the list of message recipients from the<br /> message headers. Any switches that the program<br /> requires should be provided here. Your hosting<br /> provider or system administrator should be able to<br /> tell you what to set this variable to.</p> <p>A $mailprog setting that works for many UNIX-like<br /> hosts is:</p> <p>$mailprog = ‘/usr/lib/sendmail -oi -t’;</p> <p>Some other UNIX-like hosts need:</p> <p>$mailprog = ‘/usr/sbin/sendmail -oi -t’;</p> <p>For hosts that lack a suitable sendmail binary (such<br /> as most Windows systems) we have a Perl script which<br /> does the job of the sendmail binary, in the nms_sendmail<br /> package at E<lt>http://nms-cgi.sourceforge.net/E<gt>.<br /> See the README file in the nms_sendmail package for<br /> instructions.</p> <p>=item @referers</p> <p>A list of referring hosts. This should be a list of<br /> the names or IP addresses of all the systems that<br /> will host HTML forms that refer to this formmail<br /> script. Only these hosts will be allowed to use the<br /> formmail script. This is needed to prevent others<br /> from hijacking your formmail script for their own use<br /> by linking to it from their own HTML forms.</p> <p>=item @allow_mail_to</p> <p>A list of the email addresses that formmail can send<br /> email to. The elements of this list can be either<br /> simple email addresses (like <a href="mailto:'you@your.domain'">‘you@your.domain’</a>) or<br /> domain names (like ‘your.domain’). If it’s a domain<br /> name then *any* address at the domain will be allowed.</p> <p>Example: to allow mail to be sent to <a href="mailto:'you@your.domain'">‘you@your.domain’</a><br /> or any address at the host ‘mail.your.domain’, you<br /> would set:</p> <p>C<@allow_mail_to = qw(<a href="mailto:you@your.domain">you@your.domain</a> mail.your.domain);></p> <p>=item @recipients</p> <p>A list of Perl regular expression patterns that<br /> determine who the script will allow mail to be sent<br /> to in addition to those set in @allow_mail_to. This is<br /> present only for compatibility with the original<br /> formmail script.  We strongly advise against having<br /> anything in @recipients as it’s easy to make a mistake<br /> with the regular expression syntax and turn your<br /> formmail into an open SPAM relay.</p> <p>There is an implicit $ at the end of the regular<br /> expression, but you need to include the ^ if you want<br /> it anchored at the start.  Note also that since ‘.’ is<br /> a regular expression metacharacter, you’ll need to<br /> escape it before using it in domain names.</p> <p>If that last paragraph makes no sense to you then<br /> please don’t put anything in @recipients, stick to<br /> using the less error prone @allow_mail_to.</p> <p>=item %recipient_alias</p> <p>A hash for predefining a list of recipients in the script,<br /> and then choosing between them using the recipient form<br /> field, while keeping all the email addresses out of the<br /> HTML so that they don’t get collected by address<br /> harvesters and sent junk email.</p> <p>For example, suppose you have three forms on your site,<br /> and you want each to submit to a different email address<br /> and you want to keep the addresses hidden.  You might<br /> set up C<%recipient_alias> like this:</p> <p>%recipient_alias = (<br /> ‘1′ => <a href="mailto:'one@your.domain'">‘one@your.domain’</a>,<br /> ‘2′ => <a href="mailto:'two@your.domain'">‘two@your.domain’</a>,<br /> ‘3′ => <a href="mailto:'three@your.domain'">‘three@your.domain’</a>,<br /> );</p> <p>In the HTML form that should submit to the recipient<br /> <a href="mailto:'two@your.domain'">‘two@your.domain’</a>, you would then set the recipient with:</p> <p><input type=”hidden” name=”recipient” value=”2″ /></p> <p>=item $locale</p> <p>This determines the language that is used in the date – by<br /> default this is blank and the language will probably be<br /> english. The following a list of some possible values,<br /> however it should be stressed that not all of these will<br /> be supported on all systems and also this is not a complete<br /> list:</p> <p>Catalan           ca_ES<br /> Croatian          hr_HR<br /> Czech             cs_CZ<br /> Danish            da_DK<br /> Dutc              nl_NL<br /> Estonian          et_EE<br /> Finnish           fi_FI<br /> French            fr_FR<br /> Galician          gl_ES<br /> German            de_DE<br /> Greek             el_GR<br /> Hebrew            he_IL<br /> Hungarian         hu_HU<br /> Icelandic         is_IS<br /> Italian           it_IT<br /> Japanese          ja_JP<br /> Korean            ko_KR<br /> Lithuanian        lt_LT<br /> Norwegian         no_NO<br /> Polish            pl_PL<br /> Portuguese        pt_PT<br /> Romanian          ro_RO<br /> Russian           ru_RU<br /> Slovak            sk_SK<br /> Slovenian         sl_SI<br /> Spanish           es_ES<br /> Swedish           sv_SE<br /> Thai              th_TH<br /> Turkish           tr_TR</p> <p>=item $charset</p> <p>The character set to use for output documents.</p> <p>=item @valid_ENV</p> <p>A list of all the environment variables that you want<br /> to be able to include in the email. See L<env_report|/item_env_report><br /> below.</p> <p>=item $date_fmt</p> <p>The format that the date will be displayed in. This<br /> is a string that contains a number of different ‘tags’.<br /> Each tag consists of a % character followed by a letter.<br /> Each tag represents one way of displaying a particular<br /> part of the date or time. Here are some common tags:</p> <p>%Y – four digit year (2002)<br /> %y – two digit year (02)<br /> %m – month of the year (01 to 12)<br /> %b – short month name (Jan to Dec)<br /> %B – long month name (January to December)<br /> %d – day of the month (01 to 31)<br /> %a – short day name (Sun to Sat)<br /> %A – long day name (Sunday to Saturday)<br /> %H – hour in 24 hour clock (00 to 23)<br /> %I – hour in 12 hour clock (01 to 12)<br /> %p – AM or PM<br /> %M – minutes (00 to 59)<br /> %S – seconds (00 to 59)<br /> %Z – the name of the local timezone</p> <p>=item $style</p> <p>This is the URL of a CSS stylesheet which will be<br /> used for script generated messages.  This should<br /> probably be the same as the one that you use for all<br /> the other pages.  This should be a local absolute URI<br /> fragment.  Set $style to ‘0′ or the empty string if<br /> you do not want to use style sheets.</p> <p>=item $send_confirmation_mail</p> <p>If this flag is set to 1 then an additional email<br /> will be sent to the person who submitted the<br /> form.</p> <p>B<CAUTION:> with this feature turned on it’s<br /> possible for someone to put someone else’s email<br /> address in the form and submit it 5000 times,<br /> causing this script to send a flood of email to a<br /> third party.  This third party is likely to blame<br /> you for the email flood attack.</p> <p>=item $confirmation_text</p> <p>The header and body of the confirmation email<br /> sent to the person who submits the form, if the<br /> $send_confirmation_mail flag is set. We use a<br /> Perl ‘here document’ to allow us to configure it<br /> as a single block of text in the script. In the<br /> example below, everything between the lines</p> <p>$confirmation_text = <<’END_OF_CONFIRMATION’;</p> <p>and</p> <p>END_OF_CONFIRMATION</p> <p>is treated as part of the email. Everything<br /> before the first blank line is taken as part of<br /> the email header, and everything after the first<br /> blank line is the body of the email.</p> <p>$confirmation_text = <<’END_OF_CONFIRMATION’;<br /> From: <a href="mailto:you@your.com">you@your.com</a><br /> Subject: form submission</p> <p>Thankyou for your form submission.</p> <p>END_OF_CONFIRMATION</p> <p>=back</p> <p>=head1 INSTALLATION</p> <p>Formmail is installed simply by copying the file FormMail.pl into your<br /> cgi-bin directory. If you don’t know where your cgi-bin directory is, then<br /> please ask your system administrator.</p> <p>You may need to rename FormMail.pl to FormMail.cgi. Again, your system<br /> administrator will know if this is the case.</p> <p>You will probably need to turn on execute permissions to the file. You can<br /> do this by running the command “chmod +x FormMail.pl” from your command<br /> line. If you don’t have command line access to your web server then there<br /> will probably be an equivalent function in your file transfer program.</p> <p>To make use of it, you need to write an HTML form that refers to the<br /> FormMail script. Here’s an example which will send mail to the address<br /> <a href="mailto:'feedback@your.domain'">‘feedback@your.domain’</a> when someone submits the form:</p> <p><form method=”post” action=”<a href="http://your.domain/cgi-bin/FormMail.pl" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','your.domain']);">http://your.domain/cgi-bin/FormMail.pl</a>“><br /> <input type=”hidden” name=”recipient” value=”<a href="mailto:feedback@your.domain">feedback@your.domain</a>” /><br /> <input type=”text” name=”feedback” /><br /><br /> Please enter your comments<br /><br /> <input type=”submit” /><br /> </form></p> <p>=head1 FORM CONFIGURATION</p> <p>See how the hidden ‘recipient’ input in the example above told formmail who<br /> to send the mail to? This is how almost all of formmail’s configuration<br /> works. Here’s the full list of things you can set with hidden form inputs:</p> <p>=over</p> <p>=item recipient</p> <p>The email address to which the form submission<br /> should be sent. If you would like it copied to<br /> more than one recipient then you can separate<br /> multiple email addresses with commas, for<br /> example:</p> <p><input type=”hidden” name=”recipient”<br /> value=”<a href="mailto:you@your.domain,me@your.domain">you@your.domain,me@your.domain</a>” /></p> <p>If you leave the ‘recipient’ field out of the<br /> form, formmail will send to the first address<br /> listed in the @allow_mail_to configuration<br /> variable (see above).  This allows you to avoid<br /> putting your email address in the form, which<br /> might be desirable if you’re concerned about<br /> address harvesters collecting it and sending<br /> you SPAM. This feature is disabled if the<br /> emulate_matts_code configuration variable is<br /> set to 0.</p> <p>=item subject</p> <p>The subject line for the email. For example:</p> <p><input type=”hidden” name=”subject”<br /> value=”From the feedback form” /></p> <p>=item redirect</p> <p>If this value is present it should be a URL, and<br /> the user will be redirected there after a<br /> successful form submission.  For example:</p> <p><input type=”hidden” name=”redirect”<br /> value=”<a href="http://www.your.domain/foo.html" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.your.domain']);">http://www.your.domain/foo.html</a>” /></p> <p>If you don’t specify a redirect URL then instead<br /> of redirecting formmail will generate a success<br /> page telling the user that their submission was<br /> successful.</p> <p>=item bgcolor</p> <p>The background color for the success page.</p> <p>=item background</p> <p>The URL of the background image for the success<br /> page.</p> <p>=item text_color</p> <p>The  text color for the success page.</p> <p>=item link_color</p> <p>The link color for the success page.</p> <p>=item vlink_color</p> <p>The vlink color for the success page.</p> <p>=item alink_color</p> <p>The alink color for the success page.</p> <p>=item title</p> <p>The title for the success page.</p> <p>=item return_link_url</p> <p>The target URL for a link at the end of the<br /> success page. This is normally used to provide<br /> a link from the success page back to your main<br /> page or back to the page with the form on. For<br /> example:</p> <p><input type=”hidden” name=”return_link_url”<br /> value=”/home.html” /></p> <p>=item return_link_title</p> <p>The label for the return link.  For example:</p> <p><input type=”hidden” name=”return_link_title”<br /> value=”Back to my home page” /></p> <p>=item sort</p> <p>This sets the order in which the submitted form<br /> inputs will appear in the email and on the<br /> success page.  It can be the string ‘alphabetic’<br /> for alphabetic order, or the string “order:”<br /> followed by a comma separated list of the input<br /> names, for example:</p> <p><input type=”hidden” name=”sort”<br /> value=”order:name,email,age,comments”></p> <p>=item print_config</p> <p>This is mainly used for debugging, and if set it<br /> causes formmail to include a dump of the<br /> specified configuration settings in the email.</p> <p>For example:</p> <p><input type=”hidden” name=”print_config”<br /> value=”title,sort”></p> <p>… will include whatever values you set for<br /> title’ and ’sort’ (if any) in the email.</p> <p>=item required</p> <p>This is a list of fields that the user must fill<br /> in before they submit the form. If they leave<br /> any of these fields blank then they will be sent<br /> back to the form to try again.  For example:</p> <p><input type=”hidden” name=”required”<br /> value=”name,comments”></p> <p>=item missing_fields_redirect</p> <p>If this is set, it must be a URL, and the user<br /> will be redirected there if any of the fields<br /> listed in ‘required’ are left blank. Use this if<br /> you want finer control over the the error that<br /> the user sees if they miss out a field.</p> <p>=item env_report</p> <p>This is a list of the CGI environment variables<br /> that should be included in the email.  This is<br /> useful for recording things like the IP address<br /> of the user in the email. Any environment<br /> variables that you want to use in ‘env_report’ in<br /> any of your forms will need to be in the<br /> valid_ENV configuration variable described<br /> above.</p> <p>=item print_blank_fields</p> <p>If this is set then fields that the user left<br /> blank will be included in the email.  Normally,<br /> blank fields are suppressed to save space.</p> <p>=back</p> <p>As well as all these hidden inputs, there are a couple of non-hidden<br /> inputs which get special treatment:</p> <p>=over</p> <p>=item email</p> <p>If one of the things you’re asking the user to fill in is their<br /> email address and you call that input ‘email’, formmail will use<br /> it as the address part of the sender’s email address in the<br /> email.</p> <p>=item realname</p> <p>If one of the things you’re asking the user to fill in is their<br /> full name and you call that input ‘realname’, formmail will use<br /> it as the name part of the sender’s email address in the email.</p> <p>=back</p> <p>=head1 COMMON PROBLEMS</p> <p>=over</p> <p>=item confusion over the qw operator</p> <p>In the configuration section at the top of FormMail, we set<br /> the default list of allowed referers with this line of code:</p> <p>@referers = qw(dave.org.uk 209.207.222.64 localhost);</p> <p>This use of the C<qw()> operator is one way to write lists of<br /> strings in Perl.  Another way is like this:</p> <p>@referers = (‘dave.org.uk’,'209.207.222.64′,’localhost’);</p> <p>We prefer the first version because it allows use to leave out<br /> the quote character, but the second version is perfectly valid<br /> and works exactly the same as the C<qw()> version.  You should<br /> use whichever version you feel most comfortable with.  Neither<br /> is better or worse than the other.</p> <p>What you must not do is try to mix the two, and end up with<br /> something like:</p> <p>@referers = qw(‘dave.org.uk’,'209.207.222.64′,’localhost’);</p> <p>This will not work, and you will see unexpected behavior.  In<br /> the case of C<@referers>, the script will always display a<br /> “bad referer” error page.</p> <p>=item sendmail switches removed</p> <p>In the configuration section at the top of FormMail, we set<br /> the default mail program to sendmail with this code:</p> <p>$mailprog          = ‘/usr/lib/sendmail -oi -t’;</p> <p>This is actually two different pieces of information; the<br /> location of the sendmail binary (F</usr/lib/sendmail>) and<br /> the command line switches that must be passed to it in order<br /> for it to read the list of message recipients from the<br /> message header (C<-oi -t>).</p> <p>If your hosting provider or system administrator tells you that<br /> sendmail is F</usr/sbin/sendmail> on your system, then you must<br /> change the C<$mailprog> line to:</p> <p>$mailprog          = ‘/usr/sbin/sendmail -oi -t’;</p> <p>and not:</p> <p>$mailprog          = ‘/usr/sbin/sendmail’;</p> <p>=back</p> <p>=head1 SUPPORT</p> <p>For support of this script please email:</p> <p><a href="mailto:nms-cgi-support@lists.sourceforge.net">nms-cgi-support@lists.sourceforge.net</a></p> <p>=cut

Codice html da inserire nella pagina desiderata:

<form action=”/cgi-bin/FormMail.pl” method=”POST”><br /> <input type=hidden name=”recipient” value=”<a href="mailto:tuaemail@tuodominio.it">tuaemail@tuodominio.it</a>“><br /> <input type=hidden name=”subject” value=”oggetto”><br /> <table border=”0″ cellspacing=”0″ cellpadding=”5″ align=”center”><br /> <tr><br /> <td><b> Nome e Cognome:</b></td><br /> <td align=”right”><input type=text name=”realname”></td><br /> </tr><br /> <tr><br /> <td><b>Email:</b></td><br /> <td align=”right”><input type=text name=”email”></td><br /> </tr><br /> <tr><br /> <td colspan=”2″><b>Messaggio:</b></td><br /> </tr><br /> <tr><br /> <td colspan=”2″><textarea name=”messaggio” cols=”40″ rows=”5″></textarea></td><br /> </tr><br /> <tr><br /> <td colspan=”2″ align=”center”><input type=”Submit” value=”Invia”></td><br /> </tr><br /> </table><br /> <input type=hidden name=”required” value=”email,realname,messaggio”><br /> </form>