Depends on how you set it up.  If you use the form as an administrative
tool then it works really well.  Make the user input the password and pass
it to the CGI for processing.  Also the command doens't need to be quiet
you can use the regular add and delete and it will send notification to the
person who is either added or deleted.  But as a admin interface it wroks
really well for those owners who can't remember te syntax to modify their
lists.

Kevin McKenzie
DCIT
Clemson University




At 08:34 PM 8/25/99 -0700, you wrote:
>On Wed, 25 Aug 1999, KEVIN MCKENZIE wrote:
>
>> A simple cgi script with the appropriate job command can also bypass the
>> list header per se and not generate the confirmation.  If it is sent to do
>> a sendmail with the listpass word it won't send the confirmation request.
>>
>> // JOB PW=XXXXXXXX
>> add Some_List-L [log in to unmask] Joe Blow
>> // EOJ
>>
>> If the script generated a mail message to your listserver with the above
>> body, (obviously replacing the XXXXX with the list password, and a real
>> persons address, you can hide these in the script or make the person enter
>> them to be added), then no confirmation request would be generated, and the
>> person added to the list.
>
>        This is SCARRY.  Any web input form with no confirm I consider
>really bad, but this could possibly be used really maliciously...  I'm not
>sure it's worth it at all...
>
>                                                        Jessica
>
>--
>Jessica Rasku, Box 270, Rossland, B.C., V0G 1Y0, (250) 362-5701,
>LinuxBox: (250) 362-9668.
>
>List manager: [log in to unmask]
>     send command help ---- To get help with majordomo
>               or lists ---- To get a list of all lists on server.
>
>WWW: <http://www.geocities.com/RainForest/Andes/8749>
>
>