In 1995, a 14-year-old high school student from Colorado began writing Perl scripts and uploading them to worldwidemart.com. Within a few years, his code was running on millions of web servers around the world. This is the story of Matt Wright, the teenager behind Matt's Script Archive and FormMail — the most widely installed CGI script in internet history.
Matt Wright grew up in Fort Collins, Colorado, a college town at the foot of the Rocky Mountains. He attended a local high school, and like many teenagers in the mid-1990s, he was drawn to the internet at the exact moment it was exploding into public consciousness. Netscape Navigator had just been released, personal homepages were spreading across university and ISP servers, and the web was transitioning from a research curiosity to a cultural phenomenon. Matt was 14 years old.
What set Matt apart from most teenagers browsing the early web was his curiosity about how things worked behind the scenes. Static HTML pages were everywhere, but he wanted to make pages that did something — accepted user input, sent email, saved data. The technology that made this possible was CGI, the Common Gateway Interface, and the language most commonly used for CGI on Unix servers was Perl.
Matt taught himself Perl without formal instruction. There were no online courses, no Stack Overflow, no YouTube tutorials. What existed were man pages, a handful of Usenet newsgroups (particularly comp.lang.perl.misc and comp.infosystems.www.authoring.cgi), and the slowly growing collection of Perl documentation available through CPAN. He learned by reading other people's code, experimenting, and breaking things.
His first script was a Guestbook, uploaded in October 1995. The concept was simple: visitors to a website could fill out a form with their name, email address, homepage URL, and a message. The script would append their entry to an HTML file that anyone could read. It sounds trivial today, but in 1995 this was genuinely interactive — a two-way conversation on what had been a one-way medium. Guestbooks became one of the defining features of personal websites in the late 1990s, and Matt's version was among the most widely used.
The scripts were hosted on worldwidemart.com, a server operated by World Wide Mart, Inc., a hosting company founded by Dave Jackson in Naples, Florida. Jackson provided the server space; Matt provided the code. His email address was [email protected], and the scripts lived at http://www.worldwidemart.com/scripts/ — a URL that would become one of the most visited addresses on the early web.
Over the next few years, Matt expanded his collection into what became known as Matt's Script Archive (MSA). By the time the archive reached its peak popularity, it contained 14 Perl scripts and 2 C++ programs, each solving a common problem that webmasters faced in the pre-PHP, pre-WordPress era.
The full collection included:
Each script came with documentation: a readme file explaining installation, configuration variables, HTML form examples, and an FAQ. The installation process was remarkably accessible for the era. A webmaster would download a .tar.gz archive, extract the .pl file, upload it to their server's cgi-bin directory via FTP, set the file permissions to 755, edit a few configuration variables at the top of the script (the recipient email address, the path to sendmail, the URL of a thank-you page), and it worked. No compilation, no database setup, no package manager.
The most popular script by far was FormMail. At its core, FormMail was a simple Perl program that received HTTP POST data from an HTML form, formatted it into a readable message, and piped it through the Unix sendmail program to deliver it as email. It required no database and no configuration beyond a few variables at the top of the script. A webmaster could go from having no contact form to having a fully functional one in under 15 minutes.
FormMail's popularity was staggering. The script was downloaded more than 2 million times from Matt's Script Archive alone, and countless additional copies were distributed through mirror sites, shared hosting providers who pre-installed it, web design books, and magazine CD-ROMs. By conservative estimates, FormMail ran on a significant percentage of all websites that had contact forms in the late 1990s and early 2000s.
The scripts were referenced in multiple O'Reilly books on CGI and Perl programming. Matt became a recognized name in the Perl community, invited to speak at conferences, and cited in technical publications. He was still a teenager.
Several factors explained MSA's success. First, the scripts were free — genuinely free, with no registration, no license fees, no limitations beyond keeping the credit comment in the source code. Second, they were simple. Each script was a single .pl file with configuration variables clearly labeled at the top. Third, they solved real problems that virtually every webmaster faced. And fourth, they appeared at exactly the right moment — when the web was growing exponentially but before platforms like WordPress and frameworks like Rails existed. Matt's scripts filled the gap between static HTML and the dynamic web.
Success at that scale inevitably attracted unwanted attention. By 2001, spammers had discovered that early versions of FormMail could be exploited as an open email relay. The vulnerability was straightforward: FormMail accepted the recipient email address as a hidden form field. This meant anyone could craft an HTTP request that told FormMail to send email to any address — not just the one the webmaster intended. Spammers wrote automated tools that scanned the internet for vulnerable FormMail installations and used them to send bulk unsolicited email, effectively turning hundreds of thousands of web servers into unwitting spam relays.
The problem was not unique to FormMail — many CGI scripts of that era had similar vulnerabilities — but FormMail's overwhelming popularity made it the single biggest target. Security researchers began publishing advisories. CERT/CC issued vulnerability notes. System administrators around the world found their servers blacklisted because a forgotten copy of FormMail in a cgi-bin directory was being used to send thousands of spam messages per day.
Matt acknowledged the problem and released updated versions of FormMail with security fixes, including domain-based recipient validation (the @referers array) and other input sanitization measures. However, the fundamental challenge was one of distribution: the vulnerable versions were already installed on millions of servers, and there was no automatic update mechanism. Many webmasters who had installed FormMail years earlier had no idea it needed updating, or had forgotten it was even there. The insecure copies persisted for years — some are probably still running on forgotten servers today.
The security issues drew criticism from the Perl community, particularly on PerlMonks. Critics pointed out that the scripts lacked use strict and use warnings, did not enable taint checking, and generally did not follow Perl best practices. Some of this criticism was fair — the code was written by a teenager learning as he went, and security awareness in web development was far lower in 1995 than it later became. Some of the criticism was also unfair, applying 2002 standards retroactively to 1995 code and ignoring the context in which the scripts were written.
In response to the security concerns, the London Perl Mongers created the NMS Project (Not Matt's Scripts), a set of drop-in replacements for all of Matt's scripts. The NMS versions were rewritten from scratch with modern Perl practices: strict mode, taint checking, proper input validation, and hardened email handling. Crucially, they used the same configuration format as Matt's originals, so webmasters could upgrade by simply replacing the .pl file without changing their HTML forms.
Matt endorsed the NMS Project. His response to the situation was pragmatic rather than defensive. He acknowledged the security shortcomings, pointed users toward the NMS alternatives, and continued updating his own versions. This reaction earned him respect even from his critics. As one PerlMonks user put it: "Matt handled it with more grace than many seasoned developers would have."
As the web evolved beyond the CGI era, Matt moved his script collection to its own domain, scriptarchive.com, where the documentation and download links remain accessible. The scripts at worldwidemart.com were eventually superseded, but the archive at scriptarchive.com preserved them for posterity.
Matt's most significant post-MSA project was FormMail.com, a hosted SaaS (software as a service) version of the original concept. Instead of downloading a script and installing it on your own server, FormMail.com provided a managed form processing service. Users could create forms that submitted to FormMail.com's servers, which handled the email delivery, spam filtering, file attachments, and autoresponders. The service operated on a subscription model. As of 2025, FormMail.com was still running, reportedly serving approximately 1,000 paying customers — a modest business, but one that demonstrated the durability of the core idea Matt had at 14.
Matt also created SurveyFactory, an online survey tool, and was involved with Midnight Mobility, a mobile technology company. His personal website, mattwright.com, listed his various projects and contained a brief biographical note. The tone was understated — no lengthy personal branding, no motivational slogans. A line from his site captured his attitude: "My interests have moved on."
That sentence said a lot. Matt did not become a celebrity programmer or a Silicon Valley founder. He did not write a memoir or go on a speaking circuit recounting his teenage achievements. He built something significant, maintained it as long as it was relevant, acknowledged its flaws, and moved on to other work. In an industry that often rewards self-promotion over substance, his quiet trajectory stood out.
Matt Wright's impact on the early web is one of those things that is simultaneously obvious to anyone who was there and almost invisible to anyone who was not. His scripts did not make headlines in mainstream media. There was no IPO, no acquisition, no TED talk. But the numbers tell the story: over 2 million direct downloads of FormMail alone, untold millions of copies distributed through other channels, and a collection of scripts that collectively appeared on a substantial fraction of the websites operating in the late 1990s and early 2000s.
In March 2025, a discussion about Matt's Script Archive reached the front page of Hacker News, generating hundreds of comments from developers sharing memories. The thread became a remarkable document of collective nostalgia and professional origin stories. Commenter after commenter described how Matt's scripts were their introduction to programming:
"FormMail was the first program I ever looked at the source code for. I didn't know what Perl was. I just wanted to make my contact page work. But looking at that code made me wonder how it worked, and that wondering turned into a career."
The pattern repeated across dozens of comments. A teenager or young adult in the late 1990s needed a guestbook, a counter, or a contact form. They found Matt's Script Archive, downloaded a .pl file, FTP'd it to their Geocities or university account, and — for the first time — had a working server-side script. Some of them opened the file in Notepad, saw the Perl code, and got curious. That curiosity led them to learn programming, then to study computer science, then to careers in software development. The pipeline from "I need a guestbook" to "I am a professional programmer" ran directly through Matt Wright's scripts for an entire generation of developers.
Matt's Script Archive has a Wikipedia article documenting its history and significance. The scripts are discussed in academic papers on the history of web development. They appear in retrospectives about the CGI era, in Perl community histories, and in countless blog posts from developers reflecting on how they got started.
The criticism is part of the legacy too, and it is worth acknowledging honestly. The scripts were not well-written by professional standards. They lacked security hardening that was needed as the web scaled. FormMail in particular caused real harm when exploited by spammers, and system administrators spent real hours cleaning up the damage. The PerlMonks critics who called the code "a bad example for beginners" were not wrong about the code quality. But they were often wrong about the context. Matt was a self-taught teenager writing software in 1995 for a web that nobody yet understood. Judging that code by 2002 professional standards missed the point of what MSA actually was: not a production software project, but a remarkably effective act of generosity by a kid who figured out how to do something useful and shared it with everyone for free.
The NMS Project, created to replace Matt's scripts, was itself an expression of the open-source ethos that Matt exemplified. The London Perl Mongers did not compete with Matt; they improved on his work while maintaining compatibility with his users. Matt endorsed their effort rather than treating it as a threat. The entire episode — the original scripts, the security problems, the community response, the graceful handoff — is a case study in how open-source software ecosystems actually function.
Today, the world Matt built for has mostly vanished. Nobody installs Perl CGI scripts in a cgi-bin directory anymore. Contact forms are handled by JavaScript widgets and API services. Guestbooks are a nostalgic curiosity. Hit counters are replaced by Google Analytics. Discussion forums are replaced by Reddit and Discord. The entire paradigm of "download a script file and upload it to your server" has been superseded by package managers, containers, and cloud platforms.
But the people Matt influenced are still here. They are senior engineers at major companies, CTOs of startups, professors of computer science, open-source maintainers, and independent developers. Many of them trace a direct line from their first encounter with a .pl file on worldwidemart.com to where they are today. Matt Wright did not just write scripts — he lowered the barrier to entry for an entire generation of web developers at the exact moment when that barrier needed lowering.
He did it for free, from his bedroom in Fort Collins, at age 14. That is the story.