Mail Forms

In order to activate a form so that it generates an e-mail message you must embed the appropriate CGI command in your HTML document that tells the server what to do with the information your form collects. Note: If you're using the CMS, you still need to create a form in HTML, then insert the form into a blank page using the Insert HTML command. This may or may not be available to you depending on permissions and you may need to contact Internet Development to create the form for you.

 For security reasons, if you are directing mail to a non-KUMC email address you must first contact Internet Development to have your email address added to an approved list in order to use this script.

There are several types of information that should never be collected via HTML web forms using this script.

• Contact any of the university or hospital HIPAA Officers for further information regarding HIPAA. Internet Development is not involved in the policy-making part of HIPAA but will from time to time audit mail forms for compliance.
• Credit card information should never be collected via a web form. The exception to this is if Internet Development has prepared the form to work in compliance with the state's credit card vendor. Contact Internet Development at 588-7387 for further assistance if you need to accept credit card payments.
• Other types of information that should not be collected include Social Security numbers and other private information that could be used in an inappropriate manner by a third party.

The following commands should be embedded into your HTML document. Only the first two lines are required but you will find all of them useful in customizing your form (see below for details). Remember, your form must end with a tag.

<form method="post" action="http://cgi.kumc.edu/cgi-bin/mailthat">
<input type="hidden" name="recipient" value="youruserid@kumc.edu">
<input type="hidden" name="realname" value="mailed_from">
<input type="hidden" name="subject" value="Your Subject">
<input type="hidden" name="redirect" value="http://path/to/name.html">
<input type="hidden" name="required" value="field1,field2">

NOTE: If you place a text field in your form that requests the senders e-mail address we recommend you name the field 'email.' This allows the script to capture and place the address in the "from" section of the returned mail message, allowing you to reply directly to the user if needed.

Summary of each function:

<form method="post" action="http://cgi.kumc.edu/cgi-bin/mailthat">

This 'form call' sends a request to the server that you have a form that requires processing. This request doesn't require any editing and should be the first insertion into your web document just prior to your form fields. This field is required.

<input type="hidden" name="recipient" value="youruserid@kumc.edu">

The 'recipient' request provides the the recipient's e-mail address. Substitute the e-mail address of the person who will receive the form output. This field is required.

<input type="hidden" name="realname" value="mailed_from">

The 'realname' field inserts a value you choose that will be displayed in "from" section of the e-mail that is generated from the form. Replace the "mailed_from" value field with your desired information.

<input type="hidden" name="subject" value="Your Subject Goes Here">

The 'subject' request adds a subject to the e-mail generated from the form. Substitute your subject title. This field is not required.

<input type="hidden" name="redirect" value="http://path/to/name.html">

The 'redirect' request allows you to choose a location to send the user to after the form is submitted (ex: a custom thank you page or back to your home page). This must be a complete path to the redirect page. Not required but a desirable option.

<input type="hidden" name="required" value="field1,field2">

The 'required' request blocks the user from submitting a form without filling out fields you make required. Separate required fields by commas. This field is not required.

<input type="hidden" name="sort" value="order:name,address,phone">

The 'sort' request determines the order of output received in the result e-mail. Following the "order:" command separate required fields by commas and in the order you want them returned. Not required but a highly desirable option.

NOTE: the sort function is only necessary if you want a different sort order than what is in your HTML.