Hacker News new | comments | show | ask | jobs | submit login

That is the programmer way of looking at the world, particularly the not-paid-well-enough programmer way of looking at the world.

You would, naturally, get the submission form right the first time:

1) you know that if you use an HTML hidden element with a hard coded email address you'll be a spam proxy within 2 weeks

2) you can configure sendmail on your server of choice

3) you actually know what a server is

4) you don't freeze up when I say the words "parse the query parameters"

5) you sanitized all that untrusted input to the form before you ran it through your mailing script so that it is impossible to overload the title and then inject arbitrary mail headers to CC the message to an unbounded recipient list

Now what is your level of confidence that someone making, oh, the princely sum of $20 an hour can learn all of the above before hour number six, when starting from the point "I can't program and know nothing about email or security"?




That's true. It's easy to forget how difficult this would be without experience.

Still, $120/year to enable a single web contact form seems excessive (his isn't free b/c it has more than 10 fields). You could embed a form from Google Docs for free.




Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | DMCA | Apply to YC | Contact

Search: