isokodesign Posted September 1, 2016 Share Posted September 1, 2016 Hi guys, I am really shit at PHP, but great with HTML. Just designed this website, however, I can't get the form in the SIGN UP page to work. Somebody help Here is the url: http://isokodesign.com/kapricemodels.html? Kind regards, Andrew NB:- I have attached the html file. kapricemodels.html Quote Link to comment Share on other sites More sharing options...
Jacques1 Posted September 2, 2016 Share Posted September 2, 2016 (edited) And “not working” means what? The code has all kinds of issues, and I strongly recommend you keep it offline until it's actually ready for production. A live alpha test on the Internet can go horribly wrong. The code is vulnerable to mail header injections, which effectively allows anybody to use your server as an open mail relay and send arbitrary messages (e. g. spam) to arbitrary addresses. Your message is also vulnerable to cross-site scripting attacks (e. g. injection of malicious JavaScript code). Why on earth would you put the passwords of your users and other personal data into a plaintext e-mail? Putting a firstname into the From header makes no sense. The e-mail is coming from your server, so you must use your own address. Use Reply-To if you want to include the user's address. The mail() function in general is bad, because it's far too low-level for the average programmer and the reason for many vulnerabilities. Use a proper mail library and learn the basics of security (escaping, handling passwords etc.). The Internet is in fact open to everybody, not just nice people. Edited September 2, 2016 by Jacques1 Quote Link to comment Share on other sites More sharing options...
isokodesign Posted September 2, 2016 Author Share Posted September 2, 2016 Thanks, uru. As I said before I dont know PHP. I ust copied a tutorial. Can you suggest a php script I can use. Kind regard Quote Link to comment Share on other sites More sharing options...
Jacques1 Posted September 2, 2016 Share Posted September 2, 2016 I already pointed you to the PHPMailer library. Either learn the basics of PHP and then write your own code. Or hire a professional programmer. Stealing code from random websites and then selling it to your customers when you have no idea what that code does can get you into deep trouble. It's also simply unprofessional. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.