Disable MovableType’s Send Entry Script
Blogs November 26th, 2003
The file ‘mt-send-entry.cgi’ in a default MovableType installation can be used to relay spam. If you’re not using the script to allow your users to “Send this Entry by Email”, you can safely remove the file from your MT install or change the permissions so that the script cannot execute.
However, if you need the functionality Ben Trott has posted a fix, but IMHO, you’d be safer pushing this function client-side using a mailto with some JavaScript
Jacques Distler has some more insight and there’s an active discussion on the MovableType Support Forums
Related Posts
- PHP Photo Gallery Script -- I tested the Coppermine Photo Gallery Script last night and it was very easy to install and best of all (IMO), it comes with a Windows XP Publishing Wizard plug-in that allows you to select a group or folder of...
- Movable Type Blog Migration -- Over the last week, usually in the mid-to-late evenings — after Catherine falls asleep, I have been slowly migrating my B2-based blog to Movable Type. I must say that for the most part the process has been fairly straight forward....
- Script locally, publish globally -- Good article about Groove GWS by Jon Udell of InfoWorld writes: “Enterprises are held together by scripting, in ways that we sometimes don’t like to admit. But there’s no shame in it. Wear your duct tape proudly. It’s getting more...
- Command Line Frontend to MovableType -- I must have missed this, but back in December 2003, Johann Schmidt released the latest version of MTshell, which as the subject says is a CLI for MovableType. “MTshell is a perl program which allows you to maintain your Movable...
- links for 2005-06-08 -- Niall Kennedy’s Weblog: Google Sitemaps using Movable Type “Just create a new index template and copy the code below. Choose an output file that is easy to remember such as sitemap.xml. Save and rebuild your new template file once you...
- jpcache with Movable Type -- I’m again using jpcache with my blog. This time however, I’ve integrated the PHP-based gzip and caching capabilities of jpcache with Movable Type. You should see a significant speed improvement through out the site — especially on some of the...
- Web Services: Script globally, publish locally -- Jon Udell: “A picture can be worth a thousand words. But a URL can be worth half a dozen pictures. When application behavior is expressed [as a web service], you empower your community of users to share it directly. And...
About
Send this Entry by EmailThe file ‘mt-send-entry.cgi’ in a default ???