# Simple Contact form with PHPMailer

**URL:** <https://forum.infinityfree.com/t/simple-contact-form-with-phpmailer/26413>\
**Category:** News and Announcements\
**Created:** [February 23, 2020, 11:43am UTC](https://forum.infinityfree.com/t/simple-contact-form-with-phpmailer/26413 "2020-02-23T11:43:16Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![Oxy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/oxy/32/37989_2.png) [@Oxy](https://forum.infinityfree.com/u/Oxy)\
**Post date:** [February 24, 2020, 12:33pm UTC](https://forum.infinityfree.com/t/simple-contact-form-with-phpmailer/26413/8 "2020-02-24T12:33:28Z")

</div>

> [@Admin](#):
>
> But I don’t see how I could write a .htaccess file that protects anyone from writing bad code which exposes credentials.

Only those folders without index or sim.  
because now everyone knows the directory structure, so malicious people could take a peek and  
it is better that the server does not display it, also this is an opportunity for you to fence yourself 🙂

Most users will use it “as is” and then that’s a problem.

* * *

**Unrelated to your package** (because it does not contain .phps)  
[We had examples](https://forum.infinityfree.com/t/mx-record-problem-can-t-receive-emails/9599/12) of when users edited .phps  
but did not read the warnings and manual and leave it publicly visible - they didn’t change the extension to .php 🙂  
So who knows what kind of things we can expect in the future from users

---

_[View the full topic](https://forum.infinityfree.com/t/simple-contact-form-with-phpmailer/26413)._
