Matt's Formmail Script Problem

[Cliff]

If a site is running a typical "Matts" formmail script, version 1.92 and a site is getting 400+ hostile emails being generated from it with the fields being filled in along the lines of the following...

/../../../../../../../../../../etc/passwd^^

but mostly the fields are filled with

"FormFillText"

Is there anything I can do to stop this happening please?

I renamed the script to something really obscure, back in 2002, and renamed it again two minutes ago. The hosting is so basic (not mine) and won't allow me to do much else than use perl scripts.

Any advice gratefully accepted, thanks :)

[urb]

Renaming the script will definately work.

[cd34]

upgrading to the latest version and making sure the referrer and destination fields are properly assigned will work as well.

That's a pretty old exploit that they are trying.

[Cliff]

Thanks guys :D