This form accidentally HACKS WordPress – HELP!

  • smijos

    (@smijos)


    20 years ago

    <FORM METHOD=POST ACTION="http://xxxxxxx.org/cgi-sys/FormMail.cgi">
    <input type="hidden" name="recipient" value="xxxxxx@xxxxx.org">
    <input type="hidden" name="subject" value="xxxxxxxxx">
    <input type="hidden" name="redirect" value="http://www.xxxxxxx.org">
    xxxxxinfoxxxxx
    <p>Name (optional):
    <input name="name" type="text" id="name" />
    <br />
    Email (optional):
    <input name="email" type="text" id="email" />
    </p>
    <p align="left">
    <strong>Title:</strong><br />
    <textarea rows="10" cols="60">Enter text here.</textarea>
    </p>
    <p align="left">
    <input type="submit" name="Submit" value="Submit" />
    </p>

    When I place this text into my wordpress post, it makes it so you can never save, edit, or publish. It just won’t do anything. I now have 2 drafts that I can never delete or publish….grrrr… There must be a better way.

Viewing 11 replies - 1 through 11 (of 11 total)
  • vkaryl

    (@vkaryl)

    20 years ago

    You may be able to delete them through the database using phpmyadmin.

    Thread Starter smijos

    (@smijos)

    20 years ago

    okay…I’m sure I can delete them somehow –
    Anyone had luck posting a form like this in a wordpress post?

    vkaryl

    (@vkaryl)

    20 years ago

    Why on earth do you need this in a post?

    niziol

    (@niziol)

    20 years ago

    There are a number of very good contact form plug-ins for WordPress, I’d think it would be prudent to use one of those.

    FormMail.cgi (in its various forms) is often not recommended as it can be “security deficient”. It probably won’t let you do anything with these posts because it might think that this is some kind of injection attack or something like that. I’m just guessing here, but I think that would make sense.

    vkaryl

    (@vkaryl)

    20 years ago

    Actually, formMail works just fine in a Page on wp. That’s why I asked why heesh needed it in a post….

    niziol

    (@niziol)

    20 years ago

    Maybe dissociative identity disorder? Every personality/identity needs a contact form!

    I’ve always heard horror stories about using the default contactform.cgi type thingies that come with cpanel or any of those things. Besides that, looking at cgi/perl is like reading encrypted Chinese for me! But I do love PHP!

    Thread Starter smijos

    (@smijos)

    20 years ago

    Why on earth do I need this…
    Well, I’m using wordpress just to build a normal site (total non-blogish). Makes it really easy for multiple users to update their stuff, since they just use the WP panel to edit their content.

    Anyway, on one of my “posts” I need people to submit info that gets routed to an email. Oh, another really wierd thing – after I save my changes with this form, it cuts everything in half below “save and contine, save, publish” all the way down to “delete this post.” Literally, in the upload section, the right half is missing (the half directly below the save/publish buttons.)

    Lastly – the editor keeps exchanging my normal paragraphs with plain text and then <p> </p> afterward. Then when I publish it comes out with ONLY </p> at the end of each paragraph. Firefox doesn’t like that (neither does W3C)

    niziol

    (@niziol)

    20 years ago

    Are you using the rich editor? If your trying to do anything by putting in HTML code, you should turn the rich editor off, as it will mess up any code you put in.

    Thread Starter smijos

    (@smijos)

    20 years ago

    okay, I turned it off…but it still puts in an extra </p> here and there

    still need help with that form…

    ifelse

    (@ifelse)

    20 years ago

    Can I recommend using the WP contact form plugin instead?

    Thread Starter smijos

    (@smijos)

    20 years ago

    Okay, I’ll give it a whirl

Viewing 11 replies - 1 through 11 (of 11 total)

The topic ‘This form accidentally HACKS WordPress – HELP!’ is closed to new replies.

Tags