Setup - Formproc Allowed
To prevent unauthorized persons from using your form mail processor, the allowed destination e-mail addresses must be specified in the setup '_formproc_allowed' entry. Any attempt to 'spoof' the 'to' address in the form will result in no e-mail being sent.
Addresses can include wildcard characters *, + and ?:
* - matches zero or more of any character
+ - matches one or more of any character
? - matches zero or one of any character
such as: *@contentor.net would allow e-mail to any address at contentor.net
list??@yourdomain.org would allow entries such as listyourdomain.org, list24yourdomain.org, listAyourdomain.org
The _formproc_allowed entry can have multiple addresses or address patterns separated by commas. If the specified 'to' address matches any of the entries in _formproc_allowed, the e-mail will be sent.