Thanks much uxbod,
I'm working on the script with your suggestions. Actually I bought a couple of php books too to start learning.
I've also been doing some on line research on this the past couple of days and after learning a bit, I'm concerned about spamming, attacks, etc. So after what I've read, I'm think for now I should use a pre made and secure script while I learn php and then maybe some time in the future I'll write my own when I feel Confident. What do you think about pre made form mail scripts?
I was looking at PHPMailer-FE from
Codeworx Technologies Their site claims it is a secure and regularly updated script - is this accurate?
Apparently in 2007 there was a security vulnerability in the script and they went a long time without patching it…
Another point - I bought the book – “The Essential Guide to Dreamweaver CS4 with CSS, Ajax, and PHP” by Powers and in it the author claims that if you want to accept html mail, use this script, but he does not recommend using PHPMailer-FE because when browsers are configured to not accept html mail there should also be a text alternative anyway. Would PHPMailer-FE be a security risk because it accepts html mail and file uploads?
Powers goes through a tutorial on how to create a PHP form mail script for text only and includes the code snippets and claims it is a secure script.
What do you think would be better? Use his code from his book? Or use PHPMailer-FE? Or would you recommend a different script than that, which accepts only non html mail?
I was also looking at the forms-to-go code generator
Form to Email scripts easy with Forms To Go which is a drag and drop application which you can drop your form into and it creates your php – does that application write secure code, or am I better off staying away from script generators and going with a well written secure script?
I don't really care about file and photo uploads right now, as long as I can get a basic email via the web form that’s all I need for now...