Email attachments and placeholders

[Ben]

Heya,

As per my email to you jpnenon, I've been rethinking this a bit & I've removed the code I posted in the previous post.

The problem was that it introduced a security hole: hackers would be able to use it to email themselves sensitive files on your server, such as your Form Tools config.php file.

I still like the idea of adding it, but it would require one caveat: you would need to provide a whitelist of files that COULD be attached. The syntax would look something like this:

Code:

{$attachment fieldvalue="ANSWER_field1" allowed="path/to/file1.txt,other/folder/whatever.pdf"}

Would that work for you, do you think?

- Ben