Advice Needed: Should I charge for a new form

**dharrison** · #1 (**permalink**) 03-25-2006, 04:48 PM

Hi

About 6 years ago when I started off web design, I opted for using a popular CGI script to process mine (and my customer's) forms.

Now as time has moved on, these do get subjected to a fair amount of abuse by passing spammers.

Now I have found a PHP version which involves a security code and a few other functions to keep those spammers at bay (fingers crossed!).

Now I have a dilemma. Should I charge for my customers to have this new PHP script? Or is that just taking the p**s?

Don't get me wrong. I am all for customer satisfaction (that is my priority), but I am just asking what you would all do. The last thing I want though is a grilling or to open up any more ethics debates. :)

Any help/advice/opinions would as always, be gratefully received.

Many thanks and best regards,

ADAM Web Design · #2 (**permalink**) 03-25-2006, 05:32 PM

I would charge them.

It's a problem that isn't necessarily your fault...it's other people abusing the system, and you coming up with ways to solve it.

It happens all the time. I remember one of the first IT jobs I did was to charge a client for blocking access to porn on his machine because his employees were printing it off...in black and white.

JKomp · #3 (**permalink**) 03-25-2006, 06:14 PM

Yes, in those circumstances I would most probably charge.
Let's take a popular example - the million dollar homepage was taken hostage a while back, this was because of weaknesses in the site's server. By working with his hosters the owner was able to reclaim the site and stop it from happening again. While he didn't have to pay the hackers he did have to pay his hosting company - same thing goes here (except not hosting). You originally charged for one thing, if your clients want to upgrade then they can do but for a fee.

Hope this makes sense.

Tim · #4 (**permalink**) 03-25-2006, 06:56 PM

Quote:

Originally Posted by dharrison

Now I have found a PHP version which involves a security code and a few other functions to keep those spammers at bay (fingers crossed!).

My succinct answer is yes (for the reasons above).

My succinct question is where can I get it from?

Thanks,
Tim

**dharrison** · #5 (**permalink**) 03-26-2006, 05:43 PM

I PM'd it you to Tim.

HTH

gelcreative · #6 (**permalink**) 03-27-2006, 03:02 PM

Hi Debbie

The same applies to me. I have a bunch of CGI script forms out there and I *know* they are being abused, but I don't want to point it out to my clients and then turn round and say I can fix it, but for a fee. Seems a bit like ambulance chasing.... but I must admit, I'm dying to get my hands on those forms and turn them into PHP or something.

Can you PM me your code too.. it might be better than mine which may have errors. I'm not that good at writing code!

Ta - Jane

**dharrison** · #7 (**permalink**) 03-27-2006, 05:32 PM

I have Pm'd it to you Jane.

Its not my script personally. I am just starting out in PHP. Tho it would have been pretty good if it was my first attempt.

Tim · #8 (**permalink**) 03-27-2006, 06:44 PM

Thanks Debbie.
It might be worth posting the link to avoid multiple PMs!

Paul B · #9 (**permalink**) 03-28-2006, 04:35 AM

To concur. I had to do this sort of upgrade with some 20 osCommerce stores where a vunerability was exploited that spammers could use.

I wrote to all store-owners advising:

Quote:

"...this urgent work will be performed in the next 7 days at a cost of £50 per store.

Please advise immediately if you do not wish the vital patch to be installed. However, you should be aware that ecommerce stores like yours are being shut down by hosting companies because of this vunerability and we cannot recommend this patch too highly, nor can we be held responsible for actions of third parties if it is not applied..."

A bit heavy-handed, but no-one complained and they all paid...

**dharrison** · #10 (**permalink**) 03-28-2006, 04:57 AM

Quote:

Originally Posted by Tim

Thanks Debbie.
It might be worth posting the link to avoid multiple PMs!

You are of course right. 4 hours sleep seems to be taking its toll.

OK I went to http://www.hotscripts.com/Detailed/56760.html

The only fault I found in the whole script was the IP Address doesn't record on the web page as predicted. But I just copied and pasted the same command that is used for the email (which works fine).

Hope this helps. Any confusion, do feel free to PM me. Put it this way, if a complete newbie like me can do it, so can anyone!

And PaulB thanks for the advice. I might see how the script runs first. Tho I got my first enquiry through on it today. A fellow web designer asking for a reciprocal link (I think not!).