Hey,

I have a basic mail() script I wish to use, but I want to add a checkbox with it if I can, can I do it with this script;

<?php
if (isset($_REQUEST['email']))
//if "email" is filled out, send email
{
//send email
$email = $_REQUEST['email'] ;
$subject = $_REQUEST['subject'] ;
$message = $_REQUEST['message'];
mail( "", "Subject: $subject",
$message, "From: $email" );
echo "Thank you for filling out the form.";
}
else
//if "email" is not filled out, display the form
{
echo "<form method='post' action='mailform.php'>
Email: &nbsp;&nbsp;&nbsp;<input name='email' type='text' /><br />
Subject: <input name='subject' type='text' /><br /><br />
Message:<br />
<textarea name='message' rows='15' cols='40'>
</textarea><br />
<input type='checkbox' name='mailing' />Yes, I want to receive further information and updates from jonathonbaker.com<br />
<input type='submit' />
</form>";
}
?>

and where do I have the checkbox info sent to? (I left the email address for it to be sent to out)

In that case im assuming you would add the persons email to the mainling list, so you would have to get the users email from a input field and then have something like this:

PHP Code:

$usersEmail = mysql_escape_string($_POST['usersEmail']);
mysql_query("INSERT INTO mailinglisttable SET email='$usersEmail'"); 


Also NEVER EVER EVER use $_REQUEST

This leaves you open to all sorts of hacking, and injection especially where this is using mail u could very easily find your account suspended or terminated because a spammer could send many unsolicited emails using this code.

use $_POST to reduce the risk.

because $_REQUEST uses BOTH $_POST and $_GET

so someone could do this

http://ursite.com/thisscript.php?ema...m&subject=haha this is spam&message=This is a spam email sent using a silly persons script

and that would send a email every time it was loaded.

Hopefully you get what i mean

Hope this helps.

Dan
(Reputation Points much apprieciated)