UGN Security Forums UGN Security: Knowledge Base Programming Web Design, Protocols & Other Languages Form to e-mail

<IfModule mod_perl.c>

  PerlModule Apache::DBI
  PerlSetVar mailhost 10.100.100.23

  <Perl>
    use Utils;
    use CGI;
    CGI->compile(':all');
  </Perl>

  <Location /mailer>
    SetHandler perl-script
    PerlHandler MailFormHandler
  </Location>
</IfModule>

package MailFormHandler;

$| = 1;

use strict;    #using strict.  I never code without it.
use CGI;       #I use CGI so I can automatically parse forms.
use Apache::Constants qw(:common);  #Because it's sexy.
use Net::SMTP;  #Do I really have to explain?

sub handler() {  # This handler is required for using mod_perl.

    my $obj = new CGI; # Defining my CGI.

    my $mailhost = "funeralplan.com";  #The Mail Host
    my $recipient = $obj->param("recipient"); # Who is getting the email?
    my $subject = $obj->param("subject"); #The subject of the email.  If the email doesn't have a subject entered, set the default to MailFormHandler email
    if (!$subject) {
        $subject = "MailFormHandler email";
    }
    my $sender = "[email protected]"; #Do I have to explain everything to you now?
    my $returnpage = $obj->param("returnpage"); #The return page is the page you are going to want the person to go to after they have submitted the form.  You can make them go to any page you want.  The information is kept in the form.  We will get to that.


    my $emailaddress = $obj->param("email"); # The persons email address that they entered into the form.
    my $smtp = new Net::SMTP($mailhost); #Activating the SMTP module.
    $smtp->mail($sender); #Setting the sender.
    $smtp->to($recipient); #Setting the recipient
    $smtp->data(); #Specifying that we want to start putting in some data.  Next three lines are self-explanatory.
    $smtp->datasend("To: " . $recipient . "\n");
    $smtp->datasend("From: " . $sender . "\n");
    $smtp->datasend("Subject: " . $subject . "\n\n");
#This next block is going to run through all the parameters that were in the field and put them in the email.
    my ($name, $val);
    foreach $name ($obj->param()) {
        if (($name !~ /\.x$/) and ($name !~ /\.y$/)) {
            foreach $val ($obj->param($name)) {
                $smtp->datasend($name . ": " . $obj->param($name) . "\n");
            }
        }
    }
    $smtp->dataend();
    $smtp->quit;

    print $obj->redirect($returnpage);

    return OK;

}

1;

<form action="/mailer">
<input type=hidden name="recipient" value="Who Is Getting The Email">
<input type=hidden name="returnpage" value=/page/to/return/to>

<input type=hidden name="subject" value="Website Feedback">
Your Name
<input name="Name" size=40>

Your Address
<input name="address" size=40>

<input name="address2" size=40>

Your Phone Number
<input name="telephone" size=40>

Your Email
<input name="email" size=40>

Comments
<textarea rows=10 cols=40 name=Comments></textarea>

<input type=submit value="Send Comments">

</form>