security issues when using CDONTS

[emms]

Hi,

I'm setting up a simple form to allow users to enter their name and address this information will then be emailed to me. To do this I'm using CDONTS. Are there any security issues associated with allowing emails to be sent from the server. I've checked the microsoft site and couldn't find any information.

I'd appreciate any help you could give me as my boss is refusing to allow me to set this up until I convince him its safe and wont leave us open to hackers...

thanks

Emma

 

[yandso]

The only things that I would suggest is that you parse the name fields before submitting them. That way you can remove any non standard characters. By doing that and not allowing attachments. You will greatly reduce your chances of getting hacked that way.

 

[viff]

CDONTS is basically riding on the SMTP to send out the email straight via internet. In other words, it is very prone to hackers coz it is sent out in plain text. No authentication or security check is enforced on it. Most of banks or big companies are against using CDONTS.