cgi form email script not working (404)
Quote from: Townman Have I become totally confused here? I thought these scripts (notably Matt's form mail) had been taken down as they were viewed as being insecure? If this is the case is it unwise allowing / suggesting / recommending that individuals who have cgi space host this service there?
The immediate concern at the time was the Shellshock vulnerability. This has since been patched and the exploit fixed but it's put a spotlight on these scripts, not least the fact that most of them are over a decade old and are no longer maintained. Exploits come along all the time, and running centralised scripts like this puts us at a disadvantage when they do. If people want to mimic the scripts on their own individual areas of CGI webspace then the onus on security switches to the user, so it becomes less of a concern for us.
Quote from: Bob It's not looking like we're going to be in a position to re-factor/engineer the scripts without scheduling some time on our roadmap. To do this requires a certain degree of justification, and at present I'm led to believe that there are ~60 people making use of these scripts so I've a suspicion I'm going to struggle
I'm waiting on more precise figures, which we can then use to weigh up our options.
Now I have these figures, I can say with certainty that these scripts aren't going to be switched back on. I'm sorry folks
Quote from: Bob It's looking like it's boiling down to either providing customers an alternative hosting environment (we've only really the CGI platform, which wouldn't be without problems) or suggesting some third party alternatives (suggestions welcomed).
So, if you're left looking for a replacement, then you've a few options.
1. If you have access to the CGI platform, then you can try installing an equivalent script yourself. The perl scripts our solutions were originally based on can be found here, however you need to be mindful that these scripts are very dated and no longer maintained. The author advises you to use the alternatives here but even this second repository of scripts looks to be dated
2. You can try and find an online form/counter/guestbook creation tool. Assuming you're not wanting to pay for the privilege, this will probably involve some degree of advertising. I/Plusnet can't vouch for the validity/performance/security of any of the following, however a quick Google search returns the following:
Webcounters:
http://www.hitwebcounter.com/
http://www.simplehitcounter.com/
http://www.e-zeeinternet.com/
Forms:
http://www.formbuddy.com/
http://www.freedback.com/
http://www.jotform.com/
Guestbooks:
http://www.smartguestbook.com
http://www.bravenet.com/webtools/guestbook/
http://www.123guestbook.com/
3. There are some pretty nifty website builders available these days, many of which will have support for the authoring of contact forms, counters, guest books and the like. Two reputable options (which I can personally recommend) are Wix and Weebly. You might want to take a look at them?
On a final note, sorry again for the poor communication surrounding this issue, it's proved very troublesome trying to map script usage back to specific accounts, which would have allowed us to notify people.
