[Security] Bundled snippet ContactForm

Susan, let’s make sure to commit that for the pending 0.9.2 release, and any fix you might find to resolve the weird [(emailsender)] issue.

I had removed the From-Header to make sure, the mail passes spf-enabled mailservers.

To fix the emailsender-problem you could change line 21 28 to

Yes that change will work, I just wonder why the exact same MODx tag worked in the original version. I don’t like it when things suddenly quit working like that.

Maybe the From: header could be set as an option, that "From: nobody..." looks kinda funny.

You’re right. I’m still wondering that [(emailsender)]-tag in snippets worked before, I just didn’t know that MODx passes these variables within snippets