VrForms PRO is a form processing script (form mail) written in PHP with optional photo CAPTCHA. It will process any form and send the contents to you by email.

Your visitors (and spambots) cannot see your email address. VrForms cannot be hijacked by spammers. It has a number of built-in features to combat form spam. By default the script will check all fields for email headers. Spammers commonly try to submit these to form processor scripts. They can try to submit them from any field in your form or in a field of their own. VrForms will check your form and block any illegal entries. This prevents them from using the form as a relay to send spam to third parties.

Features

• Very secure
• Very easy to install
• Complete PDF manual also included
• Process any form
• Attach file uploads
• Upload files to the server
• Set Required fields
• Auto responder
• See sender's IP address
• Block IPs
• Block web addresses
• Block rude words
• Block gobbledegook characters (§,¢,¤ etc)
• CSV output to file or attachment
• Referrer checking
• Check for a set cookie
• Photo CAPTCHA
• Optional HTML email format
• Ignore fields
• Sort fields
• Auto redirect to "thank you" page
• Free support

Features in Detail

VrForms is written in such a way that it will process any form. You can use it to process your existing forms or any new forms that you make. The script will accept POST and GET methods. It will also process multiple select values and multiple check box values of the same name.

Attach file uploads

The script will handle file uploads of any file type and send them as attachments to the email that is sent to you. There is no limit to the number of attachments you can send. You do not need to make any configuration changes to the script to allow attachments, they will be detected automatically but you must remember to code your form correctly. The instructions tell you how to do this.

Upload files to the server

By default, any files uploaded from your form will be sent as attachments to the email the script sends you. Alternatively you can configure the script to upload these files to your server. You can specify a location for the uploaded files and specify a prefix for the file names. You can use inputs from your form to prefix the file name, so for example you could have a file name prefixed by the user's name. The file names of uploaded files are included in the body of the email sent from the script so you can see which files were uploaded by the visitor.

Required fields

You can choose to require specific fields on your form. If these are empty when the form is submitted the user will be issued with a message to go back and enter a value. The form will not be sent until the required fields are filled out. If you do not enable required fields, the script will still issue an error if all fields are blank, and will not send an email.

Auto responder

You can configure the script to automatically send an email to the person who submitted the form. If enabled it will send an email consisting of a header message, the form data submitted and a footer message. You can customise the header and footer messages and the subject line of the auto response. You can also attach a file to the auto responder.

IP address display

If you enable this, the email sent to you will have the sender's IP address shown at the bottom.

Check for banned IPs

You can ban specific IP addresses (or classes) from using your form. You can make a list of the IP addresses you would like to ban. There is virtually no limit to the number of IP addresses you can list. You can specify an IP class (or classes) to ban which would ban every IP address in that range. If the form is submitted from a banned IP address, the (contents of the form) email will not be sent to you. The script will issue an error to the user. You can edit the error message that is issued.

Block web addresses/rude words

By default the script will not allow web addresses (URLs) to be posted in any field. If someone is trying to spam you, you can be fairly certain that they will include a web address in the comments or elsewhere. If you expect your visitors to enter web addresses or email addresses in the comments field, then you should disable checking for this or edit the blocked words options.

Blocked words

This is a list of words or characters that will be checked for if word blocking is enabled above. If a word (or character) is detected the script will issue an error and the email will not be sent. All fields are checked for these words.

Gobbledegook check

You sometimes get spam consisting of gobbledegook characters (Å ð ç etc). This check will prevent any messages getting through if gobbledegook is found. This check is done by default. You can disable it if you wish.

CSV output to attachment or file

CSV attachment. You can choose to have the form data included in a CSV (Comma Separated Values) file that is sent as an attachment to the email the script sends (you still get the form data in the email). The file contains the field names as the header row and the form data as the second row. The file only contains data from the submitted form and does not accumulate data from all form submissions (see below if you want a CSV file containing all form submissions). The CSV file can be opened in Excel, for example. You do not need to make any changes to your form.

CSV file on server. If you enable this, all data from submitted forms will be accumulated in a CSV file on your server. You can then download the file and open it in Excel (for example) and search/sort/manipulate/print the data to suit. By default the CSV file is kept in the same directory/folder as the script. The first line of the file is a header row made up of the field names from your form. The subsequent rows show the data submitted from your form, one line of data for each form submitted.

Referrer check

By default the script will check for a referrer (referer) header to establish that the form is being submitted from your site. You can disable this if you wish.

Check for a set cookie

If you enable this, the script will first check for the existence of a cookie. If the cookie does not exist, the script will exit, an error message will be issued and the email will not be sent. This is a very useful feature as it will block some spam bots. If this is enabled, the user (your website visitor) must have cookies enabled on their browser. To use this feature you must set a cookie on the page that the form is on. To set the cookie, you only need to add one line of code (provided in the script) to your webpage. You can set it on an ordinary HTML page or a PHP page.

photo CAPTCHA

The script comes with the photo CAPTCHA system. This is optional. You can choose to enable it in the configuration options in the script. This is a very good system for blocking spambots.

HTML email format

By default the script will send you an email in plain text but you can choose to have the output sent to you in HTML format. This presents the output in a table with different colours and bold font which makes it very neat and easy to read. You can customize this output (font type, size, colour, table colour, cell colour) using the configuration options in the script.

Ignore fields

You can configure the script to ignore certain fields on your form. This means that they are not included in the email that is sent to you. Typically this would be the "submit" button but you can configure it to ignore any field.

Sort fields

You can specify the order that your form fields are displayed in the email that the script sends. By default the script will return the fields in the order that they are submitted but if you have a very large or complex form then you might find that the default order does not suit your needs. By enabling this option you can have them displayed in any order you wish.

"Thank you" page

You have the option of presenting your visitor with a standard "thank you" message or automatically redirecting them to a "thank you" page (or any page of your choosing) after they have submitted the form. The default is the standard "thank you" message. If you are using the standard "thank you" message, they will be provided with a "continue" link to your homepage (or any page of your choosing) after submitting the form, which they can click on to continue.

Automatic redirect

If you would like the visitor to be automatically redirected to another page (or site) when they submit the form (as opposed to getting the standard "thank you" message) you can enter the web address of the page that you would like the visitor to be automatically redirected to. You can redirect them to any page on any site.  It doesn't have to be a page on your own site.

CAPTCHA stands for "Completely Automated Public Turing tests to tell Computers and Humans Apart". The word is claimed as a Trademark by Carnegie Mellon University and at the time of writing (April 2008) has not been registered.