I didn't make my point clear.
Let's say someone comes along and (using their script)
fills out your form as follows:
Your name: Spam Recipient
Your email address:
bogus@getsspammed.com
Your comments: Buy Viagra cheap at cheapvigra.com
Your script will then turn around and send this to
the address they entered:
Name: Joe Surfer
To:
bogus@getsspammed.com
Comments:
Hi there *name* (Spam Recipient) ,
you sent us comments about our site, thanks for sending us this information so we can further improve our site,
you sent us:
Buy Viagra cheap at cheapvigra.com
Have you ever received a spam that starts with a phrase
like "thanks for your feedback"? That's how it was sent.
The spammer put YOUR email address in a form that posts
to a script like you're talking about.
In the comments field they put their spam.
If you script sends email, you can let the user
specify either what the message says, OR an
email address where it gets sent.
If you let them enter a message AND an email
address which receives a copy of the message,
it won't too long before some spammer comes
along and uses a script to submit your form
with 100,000 different addresses in the "your email"
field and their spam in the comments field.