#!/usr/local/bin/perl ############################################################################## # FormMail Version 1.6 # # Copyright 1995-1997 Matt Wright mattw@worldwidemart.com # # Created 06/09/95 Last Modified 05/02/97 # # Matt's Script Archive, Inc.: http://www.worldwidemart.com/scripts/ # ############################################################################## # COPYRIGHT NOTICE # # Copyright 1995-1997 Matthew M. Wright All Rights Reserved. # # # # FormMail may be used and modified free of charge by anyone so long as this # # copyright notice and the comments above remain intact. By using this # # code you agree to indemnify Matthew M. Wright from any liability that # # might arise from its use. # # # # Selling the code for this program without prior written consent is # # expressly forbidden. In other words, please ask first before you try and # # make money off of my program. # # # # Obtain permission before redistributing this software over the Internet or # # in any other medium. In all cases copyright and header must remain intact # # # ############################################################################## # # # Update log # # Nov 1999 - version 1.6 converted to Czech # # Jan 2000 - v 2.1 - new configuration variables introduced: # # form_id, ccopy, logpath # # Feb 2000 - v 2.2 - write to file: filepath, alert # # Jun 2000 - v 2.4 - email MIME encoded "quoted printable" # # Jul 2000 - v 2.5 - semicolon delimited Excel ".csv" format added # # Jan 2001 - v 2.6 - ".csv" format delimiter made user selectable # # # # # ############################################################################## # Define Variables # # Detailed Information Found In README File. # # # # $mailprog defines the location of your sendmail program on your unix # # system. # $mailprog = '/usr/lib/sendmail'; # @referers allows forms to be located only on servers which are defined # # in this field. This security fix from the last version which allowed # # anyone on any server to use your FormMail script on their web site. # @referers = ('www.stk.cz','alex.stk.cz','newalex.stk.cz','www.issn.cz','195.113.71.227','195.113.71.252'); # Done # ############################################################################## # Check Referring URL &check_url; # Retrieve Date &get_date; # Parse Form Contents &parse_form; # Check Required Fields &check_required; # Return HTML Page or Redirect User &return_html; # Send E-Mail or ... &send_mail; # Write data to a file &write_data; # Send an alert by E-Mail &send_alert; # Write a line to log file &write_log; sub check_url { # Localize the check_referer flag which determines if user is valid. # local($check_referer) = 0; # If a referring URL was specified, for each valid referer, make sure # # that a valid referring URL was passed to FormMail. # if ($ENV{'HTTP_REFERER'}) { foreach $referer (@referers) { if ($ENV{'HTTP_REFERER'} =~ m|https?://([^/]*)$referer|i) { $check_referer = 1; last; } } } else { $check_referer = 1; } # If the HTTP_REFERER was invalid, send back an error. # if ($check_referer != 1) { &error('bad_referer') } } sub get_date { # Define arrays for the day of the week and month of the year. # @days = ('v neděli','v pondělí','v úterý','ve středu', 've čtvrtek','v pátek','v sobotu'); @months = ('ledna','února','března','dubna','května','června','července', 'srpna','září','října','listopadu','prosince'); # Get the current time and format the hour, minutes and seconds. Add # # 1900 to the year to get the full 4 digit year. # ($sec,$min,$hour,$mday,$mon,$year,$wday) = (localtime(time))[0,1,2,3,4,5,6]; $time = sprintf("%02d:%02d:%02d",$hour,$min,$sec); $year += 1900; # Format the date. # $date = "$days[$wday], $mday. $months[$mon] $year v $time"; } sub parse_form { # Define the configuration associative array. # %Config = ('recipient','', 'subject','', 'email','', 'realname','', 'redirect','', 'bgcolor','', 'background','', 'link_color','', 'vlink_color','', 'text_color','', 'alink_color','', 'title','', 'sort','', 'print_config','', 'required','', 'env_report','', 'return_link_title','', 'return_link_url','', 'print_blank_fields','', 'missing_fields_redirect','', 'form_id','', 'ccopy','', 'logpath','', 'filepath','', 'alert','', 'format','', 'delimiter',''); # Determine the form's REQUEST_METHOD (GET or POST) and split the form # # fields up into their name-value pairs. If the REQUEST_METHOD was # # not GET or POST, send an error. # if ($ENV{'REQUEST_METHOD'} eq 'GET') { # Split the name-value pairs @pairs = split(/&/, $ENV{'QUERY_STRING'}); } elsif ($ENV{'REQUEST_METHOD'} eq 'POST') { # Get the input read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'}); # Split the name-value pairs @pairs = split(/&/, $buffer); } else { &error('request_method'); } # For each name-value pair: # foreach $pair (@pairs) { # Split the pair up into individual variables. # local($name, $value) = split(/=/, $pair); # Decode the form encoding on the name and value variables. # $name =~ tr/+/ /; $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; $value =~ tr/+/ /; $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg; # If they try to include server side includes, erase them, so they # aren't a security risk if the html gets returned. Another # security hole plugged up. $value =~ s///g; # If the field name has been specified in the %Config array, it will # # return a 1 for defined($Config{$name}}) and we should associate # # this value with the appropriate configuration variable. If this # # is not a configuration form field, put it into the associative # # array %Form, appending the value with a ', ' if there is already a # # value present. We also save the order of the form fields in the # # @Field_Order array so we can use this order for the generic sort. # if (defined($Config{$name})) { $Config{$name} = $value; } else { if ($Form{$name} && $value) { $Form{$name} = "$Form{$name}, $value"; } # # empty fields also inserted to @Field_Order, otherwise # print_blank_fields doesn't work MSv 2002/01/22 # # elsif ($value) { else { push(@Field_Order,$name); $Form{$name} = $value; } } } # The next six lines remove any extra spaces or new lines from the # # configuration variables, which may have been caused if your editor # # wraps lines after a certain length or if you used spaces between field # # names or environment variables. # $Config{'required'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'required'} =~ s/(\s+)?\n+(\s+)?//g; $Config{'env_report'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'env_report'} =~ s/(\s+)?\n+(\s+)?//g; $Config{'print_config'} =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $Config{'print_config'} =~ s/(\s+)?\n+(\s+)?//g; # Split the configuration variables into individual field names. # @Required = split(/,/,$Config{'required'}); @Env_Report = split(/,/,$Config{'env_report'}); @Print_Config = split(/,/,$Config{'print_config'}); } sub check_required { # Localize the variables used in this subroutine. # local($require, @error); if (!$Config{'recipient'}) { if (!defined(%Form)) { &error('bad_referer') } else { &error('no_recipient') } } # For each require field defined in the form: # foreach $require (@Required) { # If the required field is the email field, the syntax of the email # # address if checked to make sure it passes a valid syntax. # if ($require eq 'email' && !&check_email($Config{$require})) { push(@error,$require); } # Otherwise, if the required field is a configuration field and it # # has no value or has been filled in with a space, send an error. # elsif (defined($Config{$require})) { if (!$Config{$require}) { push(@error,$require); } } # If it is a regular form field which has not been filled in or # # filled in with a space, flag it as an error field. # elsif (!$Form{$require}) { push(@error,$require); } } # If any error fields have been found, send error message to the user. # if (@error) { &error('missing_fields', @error) } } sub return_html { # Local variables used in this subroutine initialized. # local($key,$sort_order,$sorted_field); # If redirect option is used, print the redirectional location header. # if ($Config{'redirect'}) { print "Location: $Config{'redirect'}\n\n"; } # Otherwise, begin printing the response page. # else { # Print HTTP header and opening HTML tags. # print "Content-type: text/html; charset=windows-1250\n\n"; print "\n
\n"; # Print out title of page # if ($Config{'title'}) { print "\n"; # Sort alphabetically if specified: # if ($Config{'sort'} eq 'alphabetic') { foreach $field (sort keys %Form) { # If the field has a value or the print blank fields option # # is turned on, print out the form field and value. # if ($Config{'print_blank_fields'} || $Form{$field}) { print "$field: $Form{$field}
\n"; } } } # If a sort order is specified, sort the form fields based on that. # elsif ($Config{'sort'} =~ /^order:.*,.*/) { # Set the temporary $sort_order variable to the sorting order, # # remove extraneous line breaks and spaces, remove the order: # # directive and split the sort fields into an array. # $sort_order = $Config{'sort'}; $sort_order =~ s/(\s+|\n)?,(\s+|\n)?/,/g; $sort_order =~ s/(\s+)?\n+(\s+)?//g; $sort_order =~ s/order://; @sorted_fields = split(/,/, $sort_order); # For each sorted field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $sorted_field (@sorted_fields) { if ($Config{'print_blank_fields'} || $Form{$sorted_field}) { print "$sorted_field: $Form{$sorted_field}
\n"; } } } # Otherwise, default to the order in which the fields were sent. # else { # For each form field, if it has a value or the print blank # # fields option is turned on print the form field and value. # foreach $field (@Field_Order) { if ($Config{'print_blank_fields'} || $Form{$field}) { print "$field: $Form{$field}
\n"; } } } print "
\n"; # Check for a Return Link and print one if found. # if ($Config{'return_link_url'} && $Config{'return_link_title'}) { print "
\n"; print "
Zakázaný uživatel - přístup byl odepřen |
---|
O použití skriptu
FormMail
se pokusil formulář, který sídlí na $ENV{'HTTP_REFERER'}, ale
nemá oprávnění tento skript užívat. Pokud konfigurujete FormMail jako oprávněný uživatel, musíte, aby pracoval s tímto formulářem, přidat do seznamu \@referers ještě '$host'. [Tuto chybu FormMail hlásí také, když odešlete zcela prázdný formulář a v něm chybí pole 'recipient'.] Podrobněji viz (anglický) soubor README.
A Free Product of Matt's Script Archive, Inc. Česká verze © 1999 Martin Svoboda m.svoboda\@stk.cz |
FormMail |
---|
Copyright 1995 - 1997 Matt Wright Version 1.6 - Released May 02, 1997 A Free Product of Matt's Script Archive, Inc. Česká verze Martin Svoboda m.svoboda\@stk.cz |
---|
Chyba: Neznámá metoda |
---|
Požadovaná metoda předání dat formuláře není ani GET, ani POST.
Zkontrolujte prosím formulář a ujistěte se, že hodnota atributu method=
je zapsána velkými písmeny a je buď GET nebo POST.
A Free Product of Matt's Script Archive, Inc. Česká verze Martin Svoboda m.svoboda\@stk.cz |
Chyba: Žádný příjemce |
---|
Data odeslaná FormMailu neobsahují specifikaci příjemce.
Zkontrolujte prosím formulář a ujistěte se, že jste do pole se jménem
'recipient' vyplnili požadovanou e-mail adresu příjemce dat z formuláře. Další podrobnosti (v angličtině) najdete v souboru README. A Free Product of Matt's Script Archive, Inc. Česká verze Martin Svoboda m.svoboda\@stk.cz |
Chyba: Nevyplněná pole |
---|
Ve formuláři jste opomněli vyplnit požadovaná pole:
Bez vyplnění těchto polí nelze formulář úspěšně odeslat. Vraťte se zpátky na formulář pomocí tlačítka Zpět (Back) svého prohlížeče a zkuste to znova. [Tuto chybu FormMail hlásí také, najde-li nekorektní e-mail adresu příjemce.]
A Free Product of Matt's Script Archive, Inc. Česká verze Martin Svoboda m.svoboda\@stk.cz |