how to mail a form in JSP

Thread view:

janoo - 22 May 2006 13:45 GMT

hi this is ravin. i m a last year IT student and i am doing my project
at a govt. organization. i have to do one thing in my project that:

> there is a feedback form which is to be filled by any user.
> it is having four fields.

1) name
2) tel.no
3) e-mail address
4) comments

> i simply have to mail this fields to the org.'s mail address when user hits submit button. there is nothing to do with this fields.

please send releated help as early as possible.

Reply to this Message

dnasmars@gmail.com - 22 May 2006 14:06 GMT

Hi,

Have a look at javamail API.
it migth help you

Reply to this Message

Art.Rinberger@gmail.com - 22 May 2006 19:54 GMT

How about a simple example? I googled this up in about two minutes
using keywords {jsp mailto form} and it was the fourth hit.

http://www.peostri.army.mil/BAA/comments.jsp

> hi this is ravin. i m a last year IT student and i am doing my project
> at a govt. organization. i have to do one thing in my project that:
[quoted text clipped - 7 lines]
>
> please send releated help as early as possible.

Reply to this Message

steen - 23 May 2006 09:18 GMT

> How about a simple example? I googled this up in about two minutes
> using keywords {jsp mailto form} and it was the fourth hit.
[quoted text clipped - 12 lines]
> >
> > please send releated help as early as possible.

Well that example doesnt really show much, except the html for sending
the email, but I noticed a single thing about that example that you
should _never_ _ever_ do....the "to" email is a hidden field in the
form, and if your code just accepts that email "as-is", you open
yourself to all kinds of problems. Instead if your form as different
possible mail-to options, have the form submit a value like "1" and
then select the appropriate email from an array or something. Just
thought I'd share this thought.

/Steen

Reply to this Message

Alex Hunsley - 26 May 2006 00:00 GMT

>> How about a simple example? I googled this up in about two minutes
>> using keywords {jsp mailto form} and it was the fourth hit.
[quoted text clipped - 22 lines]
>
> /Steen

Another classic web email form of attack:
If the mail form code just blindly puts the body as typed in by the user
as the body of the email, it can be vulnerable: a naughty person could
something like the following in the body field:

Bcc: someaddress@somewhere

.. and in some circumstances, because this looks like a header, it can
be interpreted as a header by the mail agent, if it's the first thing in
the body.

Reply to this Message

Oliver Wong - 26 May 2006 15:34 GMT

> Another classic web email form of attack:
> If the mail form code just blindly puts the body as typed in by the user
[quoted text clipped - 6 lines]
> be interpreted as a header by the mail agent, if it's the first thing in
> the body.

Interesting. I thought you needed a blank line between the header and
the body of an e-mail (assuming SMTP anyway), otherwise the SMTP server
would reject the e-mail as being invalid. So if your code were indeed
vulnerable to this attack, I'd imagine you'd find out very soon (the first
e-mail which doesn't start with a blank line and can't be interpreted as a
header would fail).

- Oliver

Reply to this Message

how to mail a form in JSP

Free Magazines