You are coming from an unauthorized domain

#1

I must be the thickest plank out here as I cannot figure out PHPFormail. I
think I finally have the recipients thing figured out but I have got the
message "You are coming from an unauthorized domain" apearing now. I have
inserted the domain of the web server that the site is hosted on and the domain
of the recipient in the $referers array but am stumped. Obviuosly you can tell
I am totally new to this.
Any help would be appreciated.
Thanks

#2

cspgsl <webforumsuser (AT) macromedia (DOT) com> wrote in
news:ccbpr4$7bd$1 (AT) forums (DOT) macromedia.com:

Quote:

I must be the thickest plank out here as I cannot figure out
PHPFormail. I think I finally have the recipients thing figured out
but I have got the message "You are coming from an unauthorized
domain" apearing now. I have inserted the domain of the web server
that the site is hosted on and the domain of the recipient in the
$referers array but am stumped. Obviuosly you can tell I am totally
new to this.
Any help would be appreciated.

Checking referers is a) unreliable, b) pointless and c) dangerous.

Unreliable because some browsers don't always send a referer either by
configuration or design, and other systems (privacy software, proxy
servers) that sit between the user and your server can alter or remove the
referer without notice.

Pointless because they are easily faked. Nobody looking to exploit/spam
your form will be using a browser, that would be far too slow.

Maybe not dangerous, but not understanding a and b can contribute to a
false sense of security.

#3

from checking other posts you've made-

it's this form?
http://www.cedarsprings.cc/sunset/contact_us.htm

this line in the script:
$referers = array("boaddrink.com","216.92.77.123");

should be like this in this case:
$referers = array("cedarsprings.cc","sympatico.ca");

ON LOOKING AT THE FORM PAGE SOURCE_ THIS BELOW IS THE PROBLEM___

each form element is in it's OWN set of form tags- a common problem for
those using the lousy Layout Mode and making forms. All your submit button
does is submit Itself- not the other form elements. They are in Other forms.
So there is NO recipient field being sent.

<form name="form3" method="post" action="">
<input name="email" type="text" id="email" size="50">
</form>

ALL of your form needs to be within ONE pair of form tags.
All within one of the red rectangles dw uses as a Visual Aid.

quick fix-
do a find in source in the page for this:
</?form[^>]*>
Replace with: (nothing- leave empty)
Put a checkmark in Use Regular Expressions.

Now- in source, below the opening <body> tag, put this:
<form action="cgi-bin/formmail.php" method="get" enctype="text/plain"
name="contact_us" id="contact_us">

and above the closing </body> tag, put this: </form>

Quote:

I must be the thickest plank out here as I cannot figure out PHPFormail. I
think I finally have the recipients thing figured out but I have got the
message "You are coming from an unauthorized domain" apearing now. I have
inserted the domain of the web server that the site is hosted on and the
domain
of the recipient in the $referers array but am stumped. Obviuosly you can tell
I am totally new to this.
Any help would be appreciated.
Thanks

#4

just to soften that a bit- the all-caps i used were for the way Layout Mode
lets new users get trapped into a simple mistake like that. I was yelling
about the software- not the user of it.

dw menu-->View-->Tables-->Regular table editing.

you could also strip all the extra form tags this way-
Find-->This page-->Specific Tag-->FORM
click the - to remove attribute test.
Action: strip tag

or- remove them by hand. There's only 5 pairs.

#5

Thank you both. I shall digest this and report back in the morning.

#6

Alan:
Did as you instructed... same unauthorized domain problem

Jason:
When you say "a) unreliable, b) pointless and c) dangerous" what do you do to
get around the problem? If I leave the array blank - $referers = array(); the
problem is still there...

#7

Alan:
Did as you instructed... same unauthorized domain problem
see "www.cedarsprings.cc/sunset/contact_us.htm"
btw, no worries on the caps. Beign totally new to this is fun notwithstanding
the frustration.
And now for a totally newbie question, where is the recipient's e-mail address
supposed to go? It should be obvious but like I said, I'm as thick as two short
planks right now.

Jason:
When you say "a) unreliable, b) pointless and c) dangerous" what do you do to
get around the problem? If I leave the array blank - $referers = array(); the
problem is still there...

#8

what exactly do you currently have for the referers line?
The post you made at boaddrink shows an IP for cedarscrings, but not the
domain name.

cedarscprings.cc domain (where the form is at) and the sympatico domain
(where you want the form results sent to)

$referers = array("cedarsprings.cc", "www.cedarsprings.cc", "65.39.129.201",
"sympatico.ca", "www.sympatico.ca")

Quote:

#9

Ignore question about where to put the recipient's e-mail address... like I said two short planks...

#10

Now I've done something... the unauthorized domain message is gone but now I
get "Nothing was sent by a form. (No data was sent by POST or GET method.)
There is nothing to process here". Looks like I have fixed one thing and
screwed up another...