|
Building a CGI form
|
Denise
dsmatteau@stratosurf.net
03/13/03
|
I am trying to build a bulletin board and i can't get it to stop posting the submitting host ISP# with the comments. Here is my code: what am I doing wrong?
|
Denise
dsmatteau@stratosurf.net
03/13/03
|
Here's the code with asterisks in place of the brackets so it will show:
*TEXTAREA NAME="comments" ROWS=4 COLS=50 WRAP="soft"*
*/TEXTAREA*
*INPUT TYPE="hidden" NAME="end_display" VALUE="http://www.---.com/bulletinboard.html"*
*INPUT TYPE="hidden" NAME="required" VALUE="comments"*
*INPUT TYPE="hidden" NAME="order" VALUE="comments"*
*INPUT TYPE="hidden" NAME="savefile" VALUE="bulletinboard.html"*
*INPUT TYPE="submit" VALUE="Post"*
|
Frank
03/13/03
|
There is nothing in your html code that will account for the IP# being included.
That is happening in the Perl script.
I would advise you to be cautious when using bulletin board scripts downloaded from the internet. Some of these scripts can be very insecure. For example, a "savefile" variable might give people an opportunity to make mischief with your site. If the script is not totally secure someone could potentially create a local form of the script, replace bulletinboard.html with index.html and overwrite your webpages.
If you have the Perl script I would suggest "hard-coding" the savefile variable to avoid this problem. If you don't know how to hardcode the savefile variable then most likely you should not be using a Perl script. They are powerful and subject to abuse when not made properly.
|
Denise
dsmatteau@stratosurf.net
03/14/03
|
Thank you, Frank. I'm using the CGI provided at Angelfire. I'm sending this (without identifying the source, heheheh) to Angelfire feedback (not that they'll read it)
|
