can't nextnum

[ITB]

Cannot get nextnum feature to work. Trying to create field in my csv file with nextnum. My nextnum file never changes - have tried both empty file and with starting number in file but that didn't help. No errors given, no errors in apache log. Here are some of my settings:

Formmail.php
$NEXT_NUM_FILE = "/home/xxx/.nextnum";

/home/xxx/.nextnum = 0664 - no problems writing to hidden csv file with same permissions.

form.ini
derive_fields = "LN=%nextnum%"

Fedora Core 6
PHP 5.1

Thank You
Kevin

[russellr]

Hi,

There's a limitation. derive_fields cannot be placed in the INI file.

Move it to the form and it will work.

[ITB]

Thank You for your reply,

I did find that out in another post - I'm also utilizing file uploads and it appears that the "rename" also cannot be performed in the ini file. I'm a little nervous about that - are there any security issued with these modifications being on the form - ie converting %nextnum% into a infinite number - or spammer being able to rename file to whatever they want??

[russellr]

Hi,

The best way to answer that is to first ask you: what are you concerned about?

Can an attacker modify any file they want on your system? No.

Can an attacked submit a form with an value for nextnum? Yes. But does that matter?

So, if you can list what you're concerned about, I can answer your questions.