The answers: Yes and sometimes

You can disable the http_referer check. This could cause your machine to become an openrelay unless you use version 1.07.0 (or higher) and also use the $recipient_array ($recipient_array was added in 1.07.0).

-Andrew Riley

Thanks for your response Andrew.

just wondering what i would need to change in the code to disable the http_referer check?

And you suggested using the recipient array, how would i use this? Currently i have nothing declared here.
$recipient_array = array();

I'm using 1.07.0

Thanks

Change this

define('CHECK_REFERER', true);

to this

define('CHECK_REFERER', false);

The recipient array is a little to complex to get into here but you'll want to read the readme_pfm_classic.htm file. The section your looking for is $recipient_array and it discusses the three main ways to use it.

-Andrew Riley

Hi there Andrew,

i set the CHECK_REFERER to false, so that's now solved, thank-you.

eariler you suggested that i use one of the three recipient_array methods...

Example #1
$recipient_array = array(1 => 'email@example.com', 2 => 'somebodyelse@example.com');

Example #2
$recipient_array = array('bob' => 'email@example.com', 'sally' => 'somebodyelse@example.com');

Example #3
$recipient_array = array('fcf7b465cc30923b02a8cecc2ede239331c7990e' => 'email@example.com', ' 2bd7df9fbc9f87040e617b5c09ad16aa85d73ecc ' => 'somebodyelse@example.com');

i've tried all these examples and come across this error...

The following errors were found:
"You are trying to send mail to an address that is not listed in the recipient array.
There is no recipient to send this mail to. Please read the manual section titled "Form Configuration - Recipient". "

i have the in my html. And my domain name is refered to in the referers array.

i would very much prefer having the third example active.

do you have any ideas?
thanks for your time

Groshko

I had a big long reply and my system decided to lock up :(

The short answer is now that you filled out your recipient array, you need to remove the e-mail address in the form and replace it with the key from your array. If you used example 3 and wanted to send the e-mail to eval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%27%3c%61%20%68%72%65%66%3d%22%6d%61%69%6c%74%6f%3a%65%6d%61%69%6c%40%65%78%61%6d%70%6c%65%2e%63%6f%6d%22%3e%65%6d%61%69%6c%40%65%78%61%6d%70%6c%65%2e%63%6f%6d%3c%2f%61%3e%27%29%3b')) you would need to make the recipient field's value be fcf7b465cc30923b02a8cecc2ede239331c7990e.

-Andrew Riley