Apache2 and new php build [solved..again]

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

Hi guys,

I have just had to do an install from scratch after a botched world update....

Anyway, now we have the new php package I have had to add a few USE flags to get it going with phpmyadmin and phpBB, these being the 'pcre' and 'session' flags. Now, I did not do this with mod_php, so maybe this info will be of some use to people......

Now the only problem I have is that for some reason my php mail script is not doing anything in apache2. Before when I had problems with courier it would at least come back with an error saying the mail hadnt gone, but at the moment I get nothing, just the forms refreshed blank, and nothing whatsover in the logs.....

So I think it is a php build issue but I cannot be sure as I have a new apache2 and php installation so it could be either!

Can anyone shed some light on the problem?

Thanks,

Mark

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

This is the script (I have changed the email addresses!)....

<?php
// -----------------------------------------------------------------------------------------
// Simple E-Mail Form
// Version 1.0
// By H G Laughland
//
// Web site: http://www.laughland.biz
//
// This script may be freely used and shared. The author
// is not responsible for any problems arising from its use.
//
//--------------------------------------------------------------------------------------------

//----- Set these to variables to your name & e-mail address ---------------------------------
$fname = "Web Site Response"; // Name to be shown in from details.
$toemail = "email@email.com"; // E-mail address to be shown in from details.

//-------------------------------------------------------------------------------------------

if(!isset($action)){

?>

<?php include("ssi1.htm");?>

</head>
<BODY leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" background="images/bgb.gif">

<?php include("ssi2.htm");?>

<span class="zagol"> <strong>Contact Us</strong></span><br>
<br> <div align="justify" class="content">Please feel free to fill
in the contact form below indicating the services you require, and
one of our independent advisors will get back to you as soon as
possible: </div>
<form name="form1" method="post" action="contact.php">
<input name="action" type="hidden" value="send">
<table width="461" border="0" cellspacing="0" cellpadding="2" class="content">
<tr>
<td width="182">Your Email Address:</td>
<td width="271"><input name="femail" type="text" size="30" class="content"></td>
</tr>
<tr>
<td>Services Required:</td>
<td><input name="subject" type="text" size="30" class="content"></td>
</tr>
<tr>
<td valign="top">Message:</td>
<td><textarea name="message" type="text" class="content" rows="5" cols="30"></textarea>
</td>
</tr>
<tr>
<td>Mail Format:</td>
<td>text <input name="rdType" type="radio" value="0" checked>  html <input name="rdType" type="radio" value="1">
</td>
</tr>
<tr>
<td> </td>
<td> <input name="cmdSend" type="submit" value="send">  
<input name="cmdReset" type="reset" value="reset"> </td>
</tr>
</table>
</form>
<br>

<?php include("ssi3.htm");?>

<?php
}else{
$from = $fname . "<$femail>";
$headers = "From: $from \r\n";
if($rdType == 1){
$headers .= "MIME-Version: 1.0\n" . "Content-type: text/html; charset=iso-8859-1";
$message = stripslashes($message);
}else{
$headers .= "MIME-Version: 1.0\n" . "Content-type: text/plain; charset=iso-8859-1";
}
$ok = @mail($toemail, $subject, $message, $headers);
if ($ok) {header("Location: success.shtml");
} else {
header("Location: failure.shtml");
}
exit;
}
?>

</BODY>
</HTML>

SoTired · Apprentice Joined: 19 May 2004 Posts: 174

Do you have sendmail or ssmtp or something to get the mail off the system?

You may want to check sendmail_path in php.ini and make sure whatever it is calling is working correctly.

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

Yeah, I had the default ssmtp which didnt work, then I emerged courier and that doesnt work either...will check the file and report back...

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

It calls sendmail as default and sendmail is there (but not installed as a package, think this is just link to courier, though not a sym link...)

SoTired · Apprentice Joined: 19 May 2004 Posts: 174

Can't help you with courier, never used it. For ssmtp, if you want to give it another try, it really should work provided you've edited your /etc/ssmtp/ssmtp.conf file properly.

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

I dont 'actually' think it is a mail problem, I think it is a php problem. As if it was a mail problem and the mail 'failed' the php would take you to a failure page, it just isnt doing anything (apart from clearing the fields), which makes me think that it is a php problem...

Mark

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

OK, I have set up courier and can get mail out of the box, so I know it is not anything to do with the mail system....it is either apache2 or php...... :cry:

I have set up sqwebmail and that croaks when I log in with:

Internal error (module sqconfig.c, line 77) - contact system administrator

I think this has got something to do with it as well as this is on php...

Mark

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

Ok so I tested this simple code and it got sent....so my other php is not working properly (it did before)

<?php
mail("email@email.com", test, test);
?>

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

damn.....it is something to do with the php as I have just used 'FormToEmail' and it has sent OK. Can anyone see anything wrong with the code? The only thing I noticed was the @ in front of mail. I have been using this script for about four years, and now all of a sudden after a fresh install it doesnt work....

stuherbert · Posted: Tue Apr 04, 2006 12:07 pm Post subject:

Looks like your script is relying on register_globals being on ... and on Gentoo it's off by default.

Best regards,
Stu
_________________
--
stuart@gentoo.org
Gentoo Developer
Trustee, Gentoo Foundation
http://blog.stuartherbert.com

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

Cheers Stu,

At least I hope this will help other people if they have had a radical upgrade, below is some text from the php site, definately sounds like the reason, but I have changed it over to 'Formtoemail' now...

As always, everyones help was much appreciated...

Mark
--------------------

Perhaps the most controversial change in PHP is when the default value for the PHP directive register_globals went from ON to OFF in PHP 4.2.0. Reliance on this directive was quite common and many people didn't even know it existed and assumed it's just how PHP works. This page will explain how one can write insecure code with this directive but keep in mind that the directive itself isn't insecure but rather it's the misuse of it.

http://uk.php.net/register_globals

tomk · Posted: Tue Apr 04, 2006 1:26 pm Post subject:

It's important to note that there can be security implications when you have register_globals enabled so it's better to write code that doesn't rely on it being enabled. So in contact.php the variables $femail, $subject, $rdType and $message should be obtained from the $_POST array e.g. $_POST['femail']
_________________
Search | Read | Answer | Report | Strip

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

Yeah, this is what I am using now, hopefully a bit better...

Mark

----

<?php

/*

Enter the email address below to send the form to:

*/

$my_email = "email@email.com";

/*

*/

// This line prevents values being entered in a URL

if ($_SERVER['REQUEST_METHOD'] != "POST"){exit;}

// Check for disallowed characters in the Name and Email fields.

$disallowed_services = array(':',';',"'",'"','=','(',')','{','}','@');

foreach($disallowed_services as $value)
{

if(stristr($_POST[Name],$value)){header("location: $_SERVER[HTTP_REFERER]");exit;}

}

$disallowed_email = array(':',';',"'",'"','=','(',')','{','}');

foreach($disallowed_email as $value)
{

if(stristr($_POST[Email],$value)){header("location: $_SERVER[HTTP_REFERER]");exit;}

}

$message = "";

// This line prevents a blank form being sent

while(list($key,$value) = each($_POST)){if(!(empty($value))){$set=1;}$message = $message . "$key: $value\n\n";} if($set!==1){header("location: $_SERVER[HTTP_REFERER]");exit;}

$message = stripslashes($message);

$subject = "email.com web site response";
$headers = "From: " . $_POST['Email'] . "\n" . "Return-Path: " . $_POST['Email'] . "\n" . "Reply-To: " . $_POST['Email'] . "\n";

mail($my_email,$subject,$message,$headers);

?>

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

...damn finger trouble ignore this post

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

...damn finger trouble ignore this post

marky9074 · Apprentice Joined: 24 Sep 2004 Posts: 196 Location: UK

...damn finger trouble ignore this post