 |
 |
 |
 |
 |
 |
 |
 |
 Form to Email (Formmail) In This Section:  » How To Setup Formmail » How to Use Formmail » How to call Formmail securely? » Overview on Formmail » Security Update On Formmail  How To Setup Formmail Top You can add a form to your web site for your customers to fill-out. Then, the data will be automatically emailed to you. This is easily setup by following the instructions under the 'Formmail' button in your Control Panel and is included with all hosting plans. Here is a link to a sample form to email: http://www.lainterweb.com/products/webhosting/sample_form.html Just click on the link above and in IE choose: View/Source and in Netscape choose: View/Page Source to see the source code used for the form. How to Use Formmail Top To use Formmail, you need to create a form on one of your web pages. If you are using FrontPage, see those instructions below. The form action line should be < FORM ACTION = "/cgi-sys/formmail.pl" METHOD = "POST" > Formmail.pl will do all the programming work for you (this perl script is put into your /cgi-sys directory for you automatically when you sign up). You alter the behavior of formmail by using hidden fields in your form. There is only one form field that you must have in your form for FormMail to work correctly. This is the recipient field. Microsoft FrontPage Users If you are using Microsoft FrontPage, add a form by going to Insert/Form. Then just right click on your form and go to Form Properties. Click on the box that says "SEND TO OTHER". Then click on the Options button to add the METHOD of POST, and put: /cgi-sys/formmail.pl as the ACTION. Then go to Advanced to add any other fields as described below. For example to add recipient just click ADD then put the name: recipient and the value: . Click 'Okay' twice. Necessary Field - Recipient Field: recipient Description: This form field allows you to specify to whom you wish for your form results to be mailed. Most likely you will want to configure this option as a hidden form field with a value equal to that of your e-mail address. Syntax: < input type=hidden name="recipient" value="your_username@localnet.com" > Optional Fields You Can Use With Formmail Field: subject Description: The subject field will allow you to specify the subject that you wish to appear in the e-mail that is sent to you after this form has been filled out. If you do not have this option turned on, then the script will default to a message subject: WWW Form Submission Syntax: If you wish to choose what the subject is: < input type=hidden name="subject" value="Your Subject" > To allow the user to choose a subject: < input type=text name="subject" > _____________________________ Field: email Description: This form field will allow the user to specify their return e-mail address. If you want to be able to return e-mail to your user, I strongly suggest that you include this form field and allow them to fill it in. This will be put into the From: field of the message you receive. Syntax: < input type=text name="email" > _____________________________ Field: realname Description: The realname form field will allow the user to input their real name. This field is useful for identification purposes and will also be put into the From: line of your message header. Syntax: < input type=text name="realname" > _____________________________ Field: sort Description: This field allows you to choose the order in which you wish for your variables to appear in the e-mail that FormMail generates. You can choose to have the field sorted alphabetically or specify a set order in which you want the fields to appear in your mail message. By leaving this field out, the order will simply default to the order in which the browsers sends the information to the script (which isn't always the exact same order they appeared in the form). When sorting by a set order of fields, you should include the phrase "order:" as the first part of your value for the sort field, and then follow that with the field names you want to be listed in the e-mail message, separated by commas. Syntax: To sort alphabetically: < input type=hidden name="sort" value="alphabetic" > To sort by a set field order: < input type=hidden name="sort" value="order:name1,name2,etc..." > _____________________________ Field: redirect Description: If you wish to redirect the user to a different URL, rather than having them see the default response to the fill-out form, you can use this hidden variable to send them to a pre-made HTML page. Syntax: To choose the URL the user will end up at: < input type=hidden name="redirect" value="http://your.address/to/file.html" > To allow the user to specify a URL he wishes to travel to once the form is filled out: < input type=text name="redirect" > _____________________________ Field: required Description: You can now require for certain fields in your form to be filled in before the user can successfully submit the form. Simply place all field names that you want to be mandatory into this field. If the required fields are not filled in, the user will be notified of what they need to fill in, and a link back to the form they just submitted will be provided. Syntax: If you want to require that the user fill in the email and phone fields in your form, so that you can reach them once you have received the mail, use a syntax like: < input type=hidden name="required" value="email,phone" > _____________________________ Field: env_report Description: Allows you to have Environment variables included in the e-mail message you receive after a user has filled out your form. Useful if you wish to know what browser they were using, what domain they were coming from or any other attributes associated with environment variables. The following is a short list of valid environment variables that might be useful: REMOTE_HOST - Sends the hostname making a request. REMOTE_ADDR - Sends the IP address of the remote host making the request. HTTP_USER_AGENT - The browser the client is using to send the request. General format: software/version library/version Syntax: If you wanted to find the remote host and browser sending the request, you would put the following into your form: < input type=hidden name="env_report" value="REMOTE_HOST,HTTP_USER_AGENT" > _____________________________ Field: title Description: This form field allows you to specify the title and header that will appear on the resulting page if you do not specify a redirect URL. Syntax: If you wanted a title of 'Feedback Form Results': < input type=hidden name="title" value="Feedback Form Results" > _____________________________ Field: return_link_url Description: This field allows you to specify a URL that will appear as return_link_title, on the following report page. This field will not be used if you have the redirect field set, but it is useful if you allow the user to receive the report on the following page, but want to offer them a way to get back to your main page. Syntax: < input type=hidden name="return_link_url" value="http://your.host.xxx/main.html" > _____________________________ Field: return_link_title Description: This is the title that will be used to link the user back to the page you specify with return_link_url. Syntax: < input type=hidden name="return_link_title" value="Back to Main Page" > _____________________________ Field: background Description: This form field allow you to specify a background image that will appear if you do not have the redirect field set. This image will appear as the background to the form results page. Syntax: < input type=hidden name="background" value="http://your.host.xxx/image.gif" > _____________________________ Field: bgcolor Description: This form field allow you to specify a bgcolor for the form results page in much the way you specify a background image. This field should not be set if the redirect field is. Syntax: For a background color of White: < input type=hidden name="bgcolor" value="#FFFFFF" > _____________________________ Field: text_color Description: This field works in the same way as bgcolor, except that it will change the color of your text. Syntax: For a text color of Black: < input type=hidden name="text_color" value="#000000" > _____________________________ Field: link_color Description: Changes the color of links on the resulting page. Works in the same way as text_color. Should not be defined if redirect is. Syntax: For a link color of Red: < input type=hidden name="link_color" value="#FF0000" > _____________________________ Field: vlink_color Description: Changes the color of visited links on the resulting page. Works exactly the same as link_color. Should not be set if redirect is. Syntax: For a visited link color of Blue: < input type=hidden name="vlink_color" value="#0000FF" > _____________________________ Field: alink_color Description: Changes the color of active links on the resulting page. Works exactly the same as link_color. Should not be set if redirect is. Syntax: For a visited link color of Blue: < input type=hidden name="alink_color" value="#0000FF" > _____________________________ Any other form fields that appear in your script will be mailed back to you and displayed on the resulting page. If you have a redirect set then the fields will not show up on the resulting page. How to call Formmail securely? Top If you are trying to call formmail.pl securely, call the form that you wrote using: https://your-server/yourdomain(without the .com)/yourformfilename.htm. In your form that you wrote post to the following secure path: https://your-server/yourdomain(without the .com)/cgi-sys/formmail.pl Note: Replace "your-server" with the server that your domain name is on. (ie host.lainterweb.com or host2.lainterweb.com) Find out what server your domain name is on by going to your control panel and clicking on "Account Management" and use what is specified under "Server" for your domain. Note: If you are having problems running formmail securely, please contact tech support and they can check the system settings for your domain. Overview on Formmail Top FormMail is a generic WWW form to e-mail gateway, which will parse the results of any form and send them to the specified user. This script has many formatting and operational options, most of which can be specified through the form, meaning you don't need any programming knowledge or multiple scripts for multiple forms. This also makes FormMail the perfect system-wide solution for allowing users form-based user feedback capabilities without the risks of allowing freedom of CGI access. Security Update On Formmail Top Any users who are using versions of Formmail prior to v1.92, including the popular version 1.6, should upgrade immediately. The current version (v1.92) removes several more Spam-related security holes (plugged in v1.91), cross-site scripting vulnerabilities, and the following has also been updated since v1.6: prevents unwanted access to environment variables, fixed print_blank_fields, and fixes some problems receiving e-mail and using the redirect variable. The script has two extra arrays (new in v1.7) you must define, but will not affect current forms or the way they appear after having been submitted. We recommend you UPGRADE IMMEDIATELY! |
|
 |
 |
 |
 |
| Copyright © 2003 LA InterWeb. LA InterWeb, the LA InterWeb logo, and related marks are property of LA InterWeb. All other marks are the property of their respective owners. All rights reserved. Acceptable Use Policy. Privacy Statement. |
