I took a closer look at the FormMail.pl code, and I found a remarkable
thing: Even if the script checked for a matching $ENV{'HTTP_REFERER'},
it processed requests if that variable was missing! So I changed the
code in our copy in this respect, and reenabled the script. Now, if
$ENV{'HTTP_REFERER'} is missing, the program simply quit the execution.
Those of you who are interested can check out the details at
http://cvs.ringlink.org/cgi-bin/viewcvs.cgi/ringlink/website/cgi-bin/FormMail.pl
I'm not sure that this is *the* solution, but it's a first try.
/ Gunnar