>> Offsite forms can be submitted to use your email templates as 
>
>Here's the header you'd have to include.
>
>Referer: http://mywebsite.com/
>
>Not too much to that, is there?

Not if they are able to figure it out, which someone determined enough would 
probably eventually do.  Fortunately my hacker-wannabe hasn't.  

What would be a better way to solve this problem?  I don't want to require 
registration and login for someone who simply wants to send me a legitimate 
email, and besides registration and login require forms which themselves could 
be attack vectors.




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
ColdFusion MX7 and Flex 2 
Build sales & marketing dashboard RIA’s for your business. Upgrade now
http://www.adobe.com/products/coldfusion/flex2?sdid=RVJT

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:277701
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to