Hi!! I'll show you how to make a simple tell-a-friend script using php. If you put this on your site, your visitors will be able to recommend your site to a friend. This can be good promotion for your site. It's quite easy to set up too. Just copy and past the script below.

Put this where you want the form to appear:

<form action="friendtell.php" method="get">
<b>Tell a friend:</b>
<input type="text" size="20" name="from" value="Your email">
<input type="text" size="25" name="to" value="Friends email">
<input type="Submit" value="Recommend">
</form>

Put this in the file friendtell.php

<p class="storre">Your friend has been told!</p>

<?
$myname = $from;
$myemail = $from;

$contactemail = $to;

$message = "<h2>Hi!!</h2>\nI wanted to tell you about a cool site I found.
The url is www.yoursite.com.<br><br>Mvh $from.";
$subject = "From a friend.";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
$headers .= "From: $myname\r\n";
$headers .= "To: $contactname\r\n";
$headers .= "Reply-To: ".$myname." <$myreplyemail>\r\n";
$headers .= "X-Priority: 1\r\n";
$headers .= "X-MSMail-Priority: Low\r\n";
$headers .= "X-Mailer: Just My Server";

mail($contactemail, $subject, $message, $headers);
?>

Yepp, that's all. Hope you can make the script work!

 

 

 

Reply

A few noticable errors, you call the script friendtell.php but you get them to name it tellfriend.php, you suggest no method for your form, you have a class attribute which suggests there is also a style or stylesheet being used, I believe limiting a textbox to 15 characters for an email address is too small. It also uses auto globals, which is recommended to be disabled for security reasons. Short tags are used, for wider compatibility you should use full tags.

I also wouldn't recommend this script as there is no security features implemented and can result in unwanted spamming from your server, you really have to validate all user information that they input, or else it may result in arbituary commands being executed on your server. The case of escaped characters \r\n show it's based around Windows and that may even help in exploiting. You should also collect their information about the user, just their email entered, IP address and time, so if an event of unwanted mail is being sent and you are notified of it, you can report it to their ISP that this is what is happening and they could probably sort it for you. Make sure you have a policy that can be found easily on your site.

Another thing is you don't need two seperate pages to do this script, it can all be performed on one page but you don't have to use a single page, two pages is fine, should allow redirection though.

If I find time, I may work on this script and just improve security.

All in all, it is simple indeed.


Cheers, MC

 

 

 

Reply

I know the script is very simple and easy but at least I've tried to fix it up a bit now Hope that someone will find this useful!!

Reply

hey thanks for the scirpt

Reply