PHP FormMail

Form Encryption

 

FormMailEncoder/Decoder

 
 

Strong encryption for your website:

  • Protect your customer's information.
  • Collect credit card details securely.
  • Be more professional: ensure that your customers' information is safe from eavesdroppers.
FormMailDecoder decrypts forms from your email!

Only USD$95!

FormMailEncoder is a server application that encrypts your website visitors' form submissions. FormMailEncoder works with FormMail to encrypt the data sent from your website forms via email.

FormMailDecoder runs on your Windows PC to decrypt the data encrypted by FormMailEncoder.

You can use FormMailEncoder/Decoder to securely collect credit card details and other information from your customers and visitors.

We are currently delivering FormMailDecoder version 2.03.

How secure is FormMailEncoder/Decoder?

We've implemented state-of-the-art encryption technology that has been adopted by the US Government as a standard for cryptographic applications.

FormMailEncoder uses the AES algorithm with a 128-bit key. The key is randomly generated for each message (i.e. each form submission) using truly random values supplied by your server's operating system. It protects this key using the RSA Public Key algorithm with a 2304-bit modulus.

At current estimates, it would take a huge network of the fastest computers well over 50 years to guess a message key and decrypt the message.

Form submissions without FormMailEncoder/Decoder are insecure

A form submission from a customer travels across the World Wide Web to your server. It then travels to you via email.

Throughout its journey, your customer's data is in clear text and is viewable by any eavesdropper!

You can achieve partial security by using HTTPS protocol.

With just HTTPS, form submissions insecure!

You can use an HTTPS connection (using TLS/SSL) for form submissions. However, the customer's data still travels from your server to you in a clear text email.

Its journey to your server is secure from eavesdroppers, but the email from your server to you is insecure!

HTTPs Only Movie

Worse still, the email may be stored on your server for some hours or days before you collect it. While it is stored, your customer's private information is viewable by people who have access to your server.

Click to see a short movie that shows this process.

FormMailEncoder/Decoder + HTTPS = Excellent Security!

Use an HTTPS connection to ensure form data remains private plus FormMailEncoder to encrypt the email. With FormMailEncoder, the email containing your customer's private information is safe from all unauthorized access.

FormMailEncoder Movie

Only you, with your secret password, can access your customer's information.

Click to see a short movie that shows secure form submission using FormMailEncoder.

FormMailEncoder is free

FormMailEncoder is the software you install on your server. FormMailEncoder is free of charge and you can install it on any number of servers.

Purchasing FormMailDecoder

FormMailDecoder decrypts the emails that have been encrypted by FormMailEncoder. It also creates and manages your Private and Public Key pairs.

You purchase one license of FormMailDecoder for each PC that you want to use for decrypting messages.

The price for FormMailDecoder is just:

 

Outside Australia

Australian residents

One-time license fee

USD$95

AUD$99

Australian pricing includes Goods and Services Tax.

FormMailDecoder comes with full documentation and free support. We also offer a 30-day money back guarantee.

To purchase FormMailDecoder, click here.

System Requirements for FormMailDecoder

FormMailDecoder runs on any Windows PC. For Windows Vista, you need to download additional software from Microsoft so that you can read our extensive documentation (Help menu).

To use FormMailDecoder on an Apple Macintosh, you can use Windows emulator software for the Mac such as Parallels or VMWare Fusion.

Please contact us if you'd like a free trial of FormMailEncoder/Decoder.

System Requirements for FormMailEncoder

A binary of FormMailEncoder is available for Linux, Windows, BSD, and Sun operating systems.

There are three ways for FormMail to access FormMailEncoder:

  1. FormMail executes the binary using a standard PHP function. Your server's PHP installation needs to support this. Most PHP installations do, and there's no reason for a hosting provider to prevent this. FormMail use PHP's "popen" function to securely access FormMailEncoder on your server.

    This is the fastest and preferred method to access FormMailEncoder.
  2. FormMailEncoder is installed in your cgi-bin (it can operate as a CGI program), and FormMail opens a URL to it - just like a browser. FormMail uses PHP's standard features to open a socket to your server for this method.

    This is also secure, because the sensitive data never leaves your server, but it's a little slower to operate.
  3. The third option is to access FormMailEncoder on another server. For this to be secure, you need trust the other server and your PHP needs to support opening of SSL sockets. We can advise you on this if the other two methods fail to operate for you.

To setup FormMail and FormMailEncoder, you need to first install FormMailDecoder on your Windows PC. We don't provide a direct download for FormMailEncoder - even though it's a free product - because you can't even test it until you've got FormMailDecoder.

Please contact us if you'd like a free trial of FormMailEncoder/Decoder.

How to Use FormMailEncoder/Decoder with Your Forms

We've provided a comprehensive HOW TO guide. Also, the Help Section inside FormMailDecoder provides step-by-step installation and configuration instructions.