how to mail a form in JSP

java-programmer, how to mail a form in JSP hi this is ravin. i m a last year IT student and i am doing my project
at a govt. organization. i have to do one thing in my project that:
> there is a feedback form which is to be filled by any user.
> it is having four fields.
1) name
2) tel.no
3) e-mail address
4) comments
> i simply have to mail this fields to the org.'s mail address when user hits submit button. there is nothing to do with this fields.

please send releated help as early as possible.

java-programmer >> how to mail a form in JSP Hi,

Have a look at javamail API.
it migth help you

java-programmer >> how to mail a form in JSP How about a simple example? I googled this up in about two minutes
using keywords {jsp mailto form} and it was the fourth hit.

http://www.peostri.army.mil/BAA/comments.jsp

janoo wrote:
> hi this is ravin. i m a last year IT student and i am doing my project
> at a govt. organization. i have to do one thing in my project that:
> > there is a feedback form which is to be filled by any user.
> > it is having four fields.
> 1) name
> 2) tel.no
> 3) e-mail address
> 4) comments
> > i simply have to mail this fields to the org.'s mail address when user hits submit button. there is nothing to do with this fields.
>
> please send releated help as early as possible.

java-programmer >> how to mail a form in JSP
email***@***.com wrote:
> How about a simple example? I googled this up in about two minutes
> using keywords {jsp mailto form} and it was the fourth hit.
>
> http://www.peostri.army.mil/BAA/comments.jsp
>
> janoo wrote:
> > hi this is ravin. i m a last year IT student and i am doing my project
> > at a govt. organization. i have to do one thing in my project that:
> > > there is a feedback form which is to be filled by any user.
> > > it is having four fields.
> > 1) name
> > 2) tel.no
> > 3) e-mail address
> > 4) comments
> > > i simply have to mail this fields to the org.'s mail address when user hits submit button. there is nothing to do with this fields.
> >
> > please send releated help as early as possible.

Well that example doesnt really show much, except the html for sending
the email, but I noticed a single thing about that example that you
should _never_ _ever_ do....the "to" email is a hidden field in the
form, and if your code just accepts that email "as-is", you open
yourself to all kinds of problems. Instead if your form as different
possible mail-to options, have the form submit a value like "1" and
then select the appropriate email from an array or something. Just
thought I'd share this thought.

/Steen

java-programmer >> how to mail a form in JSP steen wrote:
> email***@***.com wrote:
>> How about a simple example? I googled this up in about two minutes
>> using keywords {jsp mailto form} and it was the fourth hit.
>>
>> http://www.peostri.army.mil/BAA/comments.jsp
>>
>> janoo wrote:
>>> hi this is ravin. i m a last year IT student and i am doing my project
>>> at a govt. organization. i have to do one thing in my project that:
>>>> there is a feedback form which is to be filled by any user.
>>>> it is having four fields.
>>> 1) name
>>> 2) tel.no
>>> 3) e-mail address
>>> 4) comments
>>>> i simply have to mail this fields to the org.'s mail address when user hits submit button. there is nothing to do with this fields.
>>> please send releated help as early as possible.
>
> Well that example doesnt really show much, except the html for sending
> the email, but I noticed a single thing about that example that you
> should _never_ _ever_ do....the "to" email is a hidden field in the
> form, and if your code just accepts that email "as-is", you open
> yourself to all kinds of problems. Instead if your form as different
> possible mail-to options, have the form submit a value like "1" and
> then select the appropriate email from an array or something. Just
> thought I'd share this thought.
>
> /Steen

Another classic web email form of attack:
If the mail form code just blindly puts the body as typed in by the user
as the body of the email, it can be vulnerable: a naughty person could
something like the following in the body field:

Bcc: someaddress@somewhere

.. and in some circumstances, because this looks like a header, it can
be interpreted as a header by the mail agent, if it's the first thing in
the body.

java-programmer >> how to mail a form in JSP "Alex Hunsley" <email***@***.com> wrote in message
news:sGqdg.2230$email***@***.com...
>
> Another classic web email form of attack:
> If the mail form code just blindly puts the body as typed in by the user
> as the body of the email, it can be vulnerable: a naughty person could
> something like the following in the body field:
>
> Bcc: someaddress@somewhere
>
> .. and in some circumstances, because this looks like a header, it can
> be interpreted as a header by the mail agent, if it's the first thing in
> the body.

Interesting. I thought you needed a blank line between the header and
the body of an e-mail (assuming SMTP anyway), otherwise the SMTP server
would reject the e-mail as being invalid. So if your code were indeed
vulnerable to this attack, I'd imagine you'd find out very soon (the first
e-mail which doesn't start with a blank line and can't be interpreted as a
header would fail).

- Oliver