Script for cgiemail authentication required

JavaScript
1

For years I have been successfully using cgiemail as a form-to-email application on my websites. Recently the webhosting company changed their servers and now the emails are trapped in their ironport filter on the server.

It appears that the filter does not like the sender address generated by the cgiemail program, which is a combination of my cpanel username and server name. The technical staff say that I must provide SMTP authentication in my javascript email script so that the emails can get through the filter.

Can anyone tell me how this is done?

2

Sadly, no.
It seems wrong to me that you would put authentication details in a JavaScript file, but the last time I used cgiemail was in 2002 or so and my knowledge is rusty to non-existent.

The best advice I can offer is to ask your hosting company for an example or a guide as to how this might be done.

Out of interest, what does your current setup look like?
Probably something like:

<form name="post" ACTION="http://yourdomain.com/cgi-bin/cgiemail/cgimailx.txt" accept-charset="UTF-8" METHOD="post">
  ... some input fields ...
  <input type="submit" name="submit" value="Submit">
  <INPUT TYPE="hidden" NAME="success" VALUE="yourdomain.com">
</form>

Wheer would a JavaScript file fit in to that?

3

Thanks for your comments. Regarding the Javascript, when the form submit button is clicked it runs a check of the fields on the form to make sure they are properly filled out and that there is a valid email address.

As this is an order form where a large or small number of items may have been selected, it builds the form action string attribute dynamically so that the appropriate cgiemail template is called. At the end of the checks it submits the form.

4

But that would be readable from the browser, right? (View source -> click js file)
And your hosting company want you to put your authentication details in there?

5

They are not really thinking it through. I told them that it would be a security issue as it is a client side script.

The cgiemail program, which is available on their server, gets information from the form, including sender and receiver addresses. The program appears not to be able to receive authentication information, so my question here is something of a fishing expedition to explore possible options.

The main problem with the cgiemail program is that it does not use the sender information as the sender address but only to populate the sender field in the body of the email. The sender address that the server uses is a combination of my cpanel username and the server name. The ironport filter doesn’t like the sender and drops the email.

I am now looking for another program - probably php to do the same job, but with authentication. :sick:

6

This would be my preferred solution, especially as accrding to the cgiemail home page, the project seems to have been abandoned.