Can users upload their own CGI scripts?
Due to concerns about security, we cannot allow users to upload their own CGI scripts to Yahoo! Store servers to create interactive online forms. However, we do provide a standard CGI script (our pro-forma functionality) that forwards the contents of an HTML form to a set of specified email addresses.
To use this feature, create the HTML form on your site, use the form and input tags specified below, and set up an approved email recipients list using the Order System Settings page in Store Manager.
What do I use for the opening FORM tag?
Forms must submit to the new form submission URL:
New form submission URL:
<form method="post" action="http://<accountname>.stores.yahoo.net/cgi-bin/pro-forma">
where "<accountname>" is your store ID.
Previously, form tags were submitted to the following URL:
Old form submission URL:
<form method="post" action="http://store.yahoo.com/cgi-bin/pro-forma">
All forms must now be using the new form tag for each form sent to this script from your site. After updating the URL for form submissions, you must publish your site for the changes to take effect.
What input tags and values can I use?
Three additional built-in variables used by this CGI script can be included within your FORM tag:
<input type=hidden name="owner" value="me@myname.com">
<input type=hidden name="newnames-to" value="accountname">
<input type=hidden name="thankyou-url" value="http://merchantdomain.com">
The first line (owner) is required. This is the email address to which the form contents will be emailed. Owner email address values must also be specified in the "Form Submissions" section of your Order System Settings page (accessed via the "Order Emails" link for Merchant Solutions Starter merchants, or the "Fax/Email" link for Merchant Solutions Standard and Professional merchants). To learn how to set up the approved owner email list, please see "How do I add and verify approved email recipients of form submissions?"
The second line and third lines are optional. The second line adds the email address to your store's Mailing List feature (if you include a field in your form called "email"). This is a handy way to build a mailing list of your users. The third line directs merchants to a confirmation page. This URL must be a page within your store domain.
How do I add and verify approved email recipients of form submissions?
Using Store Manager, access the Order Systems Setting page by clicking the "Order Emails" link (Merchant Solutions Starter merchants) or the "Fax/Emails" link (Merchant Solutions Standard, Professional, and Yahoo! Store merchants), then:

Figure 1. Enter a list of approved email addresses in the Form Submissions section of the Order System Settings page.
What are the new confirmation page and continue page requirements?
Previously, merchants could specify any URL to which shoppers would be directed for the confirmation page (thankyou-URL) or after leaving the confirmation page (continue-URL). Security updates to the pro-forma script now require that URLs used for these pages are hosted within a merchant's store domain.
For example, a merchant whose store domain is yourstoredomain.com must send shoppers to a confirmation page hosted at yourstoredomain.com. This merchant's thankyou-URL tag could look like this:
<input type=hidden name="thankyou-URL" value="http://yourstoredomain.com/thankyou.html">
Any thankyou-URL or continue-URL which does not direct shoppers to a page within the store domain will not function. Shoppers will instead be sent to the store's home page upon submitting their form, or continuing from the confirmation page.
I'm not receiving form submissions. What should I check for?
If you have active forms on your site but are not receiving form submissions, please check for the following: