Re: Re[2]: [Exim] return-path

Top Page
Delete this message
Reply to this message
Author: Jeffrey Goldberg
Date:  
To: Andrey Novikov
CC: exim-users
Subject: Re: Re[2]: [Exim] return-path
On Fri, 23 Jul 1999, Andrey Novikov wrote:

> > Ah, but what is the correct "From" addres when a web server sends
> > email? Some cg scripts will set it to whatever the person in the
> > browser types in the "email address" field - a very bad practice,
> > IMNSHO.


> Why do you think I'm doing that. The task is not to send
> email to me. I do know that there is no reason to reply to
> pseudo-user. But the task is to send email to that
> person(s), for him to be able to reply me and to get error
> replyes on my address but not on pseudo-users. Is it making
> any sence?


What I do is the following: My CGI (it's not actually a CGI, but lets
call it that anyway) allows for the mail header Reply-To: to contain an
email address specified by the submitter of the form. So when I reply to
one of those the reply goes to the Reply-To address. I still have the
mail message be From (both the header from and the envelope from) the
webserver daemon.

In the email generated by the CGI, it is a good idea to add explicit text
in the body saying.

  The person who submitted the form supplied the email address
       $replyto
  There is no guarentee that that address is correct or belongs to the
  person who submitted the form, but a normal Reply to this message will
  be sent to that address.


Also it is useful to add things to the message headers like

X-Note: This message was generated by the XXX program on SERVER when
called by the web form at HTTP_REFERER. If this causes problems or
is being abused in any way, please notify ...

-j

-- 
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@???     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.