Contributed Programs

pgpformmail.pl

Last Updated: January 21, 2000

1. Installation

To install PGP FormMail v1.6, telnet or SSH to your Virtual Server and do the following:

1. Install PGP 5.0
2. Untar the PGP FormMail tar file located in the /usr/local/contrib area.

     % cd    (this will put you in your home directory)
     % tar -xvf /usr/local/contrib/pgp5formmail.tar
   

   This will install the two files, pgp5formmail.pl and pgp5formmail.README.txt, into your ~/www/cgi-bin directory.

3. Create a form that you would like the contents mailed to some address. The form should include the following fields (at the very least):
   • recipient=specifies who mail is sent to
     
   • pgpuserid=specifies your PGP user ID
     

   Other optional fields can also be used to enhance the operation of FormMail for you site, for example:

   • subject=specify the subject included in e-mail sent back to you
     
   • email=allow the user to specify a return e-mail address
     
   • realname=allow the user to input their real name
     
   • redirect=URL of page to redirect to instead of echoing form input
     
   • required=list of field names that are required input (comma delimited)
     

   Several other fields are supported, please see the README document for a complete presentation of the supported fields.

   For example, the HTML source for your form may look like this:

     <form method="POST" action="/cgi-bin/formmail.pl">
     <input type="hidden" name="recipient" value="order@yourdomain.com">
     <input type="hidden" name="pgpuserid" value="your_userid">
     <input type="hidden" name="subject" value="Order Request">
     <input type="hidden" name="required" value="realname,username,phone">
     Please Enter Your Name:<br>
     <input name="realname" size="40">
     <p>
     Please Enter Your Email Address:<br>
     <input name="username" size="40">
     <p>
     Please Enter Your Phone Number:<br>
     <input name="phone" size="40">
     <p>
     .
     .
     .
     <input type="submit" value="Submit">
     <input type="reset" value="Reset">
     </form>
   

   Where your_userid is the user ID for your public key. If your user ID contains characters that could be misinterpreted by a web browser, such as '<' and '>', you will want to replace these characters with the proper escape sequences. For example if your user ID were:
   • John Q. Smith <12345.6789@compuserve.com>

   represent the user ID with the following string (note the &lt; and &gt; escape sequences):

   • John Q. Smith <12345.6789@compuserve.com>
   
    
   NOTE: In order to use the pgp5formmail.pl script, you will have to install the PGP 5.0 executable onto your virtual server, and either generate a public/secret key pair or have added an existing key file's contents to your public key ring.

4. Set the referer information such that only your server will have privileges to use the formmail.pl script. Near the top of the formmail.pl script you will find the following line:
   • @referers=('YOUR-DOMAIN.NAME','YOUR.IP.ADDR.ESS');

   Substitute your domain name and Virtual Server IP address for the values YOUR-DOMAIN.NAME and YOUR.IP.ADDR.ESS respectively.

Tips

One way to modify the pgp5formmail.pl script is have it "autorespond" to the client filling out the form. You can do this by simply uncommenting out the call to "autorespond" located near the top of the script. The autorespond function is placed at the end of the file and can be modified to suit your needs.

Installation to function with PGP 2.6.2

The pgpformmail.pl script is an excellent way to transfer mail from your virtual server to a remote mail box in a secure format. For example, use the pgpformmail.pl script to send sensitive information such as credit card numbers from your Secure Virtual Server to your remote e-mail box without worrying about a third-party tampering with the information. To install the pgpformmail.pl script, telnet to your Virtual Server and do the following:

1. Install PGP.
2. Untar the pgpformmail.pl script located in the /usr/local/contrib area into your cgi-bin:

     % cd  (this will put you in your home directory)
     % tar -xvf /usr/local/contrib/pgpformmail.tar
   

   This will install the two files, pgpformmail.pl and pgpformmail.README.txt, into your ~/www/cgi-bin directory.

3. Create a form that you would like the contents mailed to some address. The form should include the following fields:
   • pgpuserid=specifies the user id for the pgp executable
     recipient=specifies who mail is sent to
     username=specifies the remote users email address for replies
     realname=specifies the remote users real identity
     subject=specifies what you want the subject of your mail to be
     

   For example, the HTML source for your form may look like this:

     <form method="POST" action="/cgi-bin/pgpformmail.pl">
     <input type="hidden" name="pgpuserid" value="your_userid">
     <input type="hidden" name="recipient" value="order@yourdomain.com">
     <input type="hidden" name="subject" value="Order Request">
     Please Enter Your Name:<br>
     <input name="realname" size="40">
     <p>
     Please Enter Your Email Address:<br>
     <input name="username" size="40">
     <p>
     Please Enter The $$$ Amount:<br>
     <input name="amount" size="40">
     <p>
     .
     .
     .
     <input type="submit" value="Submit">
     <input type="reset" value="Reset">
     </form>
   

   Where your_userid is the user ID for your public key. If your user ID contains characters that could be misinterpreted by a web browser, such as '<' and '>', you will want to replace these characters with the proper escape sequences. For example if your user ID were:
   • John Q. Smith <12345.6789@compuserve.com>

   represent the user ID with the following string (note the &lt; and &gt; escape sequences):

   • John Q. Smith &lt;12345.6789@compuserve.com&gt;
4. Set the referer information such that only your server will have the privileges to use the pgpformmail.pl script. Near the top of the pgpformmail.pl script you will find the following line: 

   @referers=('YOUR-DOMAIN.NAME','YOUR.IP.ADDR.ESS');

   Substitute your domain name and Virtual Server IP address for the values YOUR-DOMAIN.NAME and YOUR.IP.ADDR.ESS respectively.

   
   NOTE: In order to use the pgpformmail.pl script, you will have to install the pgp executable onto your virtual server, and either generate a public/secret key pair or have added an existing key file's contents to your public key ring.

Copyright © 1996-2000, Last Modified: 21 January 2000A Little Technology Shoppe LLC (ALTS.NET)®. All rights reserved. All brand names and product names used on these web pages are trademarks, or trade names of their respective holders.