Re: Help Needed with Perl cgi script and spam problem

Andrzej Adam Filip wrote:
Knute Johnson <nospam@xxxxxxxxxxxxxxxxx> writes:

AFAIK the most typical problem is lack of sufficiently paranoid checks
of parameters entered into forms before passing them to sendmail e.g.
your script sends using "sendmail -t" (take recipeint addresses from
to:/cc: headers) and abusers use some other entries (e.g. *multiline*
subject) to insert "extra" to:/cc: headers.

I'm pretty sure that is how it was done but I really need to know exactly how to do it so I can fix the code to prevent it.

P.S. Sorry if I grossly underestimated your computer skills.

This is one subject I don't know much about so I would appreciate as detailed a description that you can give me.

Thanks,

--

Knute Johnson
email s/nospam/knute/
.