ContactForm - which is the best version?

Apologies if this is covered in a forum thread somewhere, the forum search does not like to search for many of the snippet names and searching for the words "contact" and "form" did not show up the answer.


OK. There is a ContactForm v1.0 in the 0.9.2.1 release.

Over on the bugs board : http://modxcms.com/bugs/task/266?tasks=last

there is a different ContactForm v1.0 posted by Timon Reinhard (netnoise) which strips tags from the input to stop spammers adding headers to the from field.

There is then an amendment by netnoise to line 21.

Then Ryan weighs in with a ContactForm v1.1 which has some different changes but does not include Timon’s code changes.

It looks to me that the version that fixes the bug is Timon’s (with the line 21 amendment). Which should I use, and which should I recommend that others use?

Use the one that’s more secure.

I think that was the question, Ryan. We’re not security wizards, like Netnoise, and find the variations a bit confusing.

It sounds like some bugs were fixed with netnoises solution, so use that one.