does anyone know where would be a safe place to put a formail script so all domains on server could use it
Do you want to serve that script for customers where you did not activate php, so that the just include that script in their action of their form? What do you mean by safe? In that case it is more a question of how to avoid people that are not your customers access that formmailer, limit the receiver etc.