>> Offsite forms can be submitted to use your email templates as > >Here's the header you'd have to include. > >Referer: http://mywebsite.com/ > >Not too much to that, is there?
Not if they are able to figure it out, which someone determined enough would probably eventually do. Fortunately my hacker-wannabe hasn't. What would be a better way to solve this problem? I don't want to require registration and login for someone who simply wants to send me a legitimate email, and besides registration and login require forms which themselves could be attack vectors. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion MX7 and Flex 2 Build sales & marketing dashboard RIAâs for your business. Upgrade now http://www.adobe.com/products/coldfusion/flex2?sdid=RVJT Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:277701 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4