ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Tons of Spam in Contact Forms

December 12, 2008 4:06pm

Subscribe [8]
  • #16 / Dec 15, 2008 2:04pm

    Bjørn Børresen

    629 posts

    Like “Is Europe a country? Yes/No”
    - bjorn

    But not that because you just know there are a lot of people who are going to get that wrong.

    That’s the whole idea; you can use questions as a spam+idiot filter. 😉

    - bjorn

  • #17 / Dec 17, 2008 8:34am

    I’ve seen some contact forms use questions instead of captcha. So, I think a “question” idea is also better.

  • #18 / Dec 21, 2008 9:21pm

    giovanni

    209 posts

    what is the solution for those of us using the Contact Form that is part of EE in an EE template?


    the PHP solution mentioned by Eric   sounds good, but how would we implement that within the template with the contact form?

  • #19 / Dec 21, 2008 10:35pm

    Derek Jones

    7561 posts

    what is the solution for those of us using the Contact Form that is part of EE in an EE template?

    the PHP solution mentioned by Eric   sounds good, but how would we implement that within the template with the contact form?

    The ExpressionEngine Blacklist module can be used (with the downloadable blacklist) to block such content if it appears as part of a link.

  • #20 / Dec 23, 2008 12:34pm

    28Bytes

    192 posts

    I found this link—>  http://www.webaim.org/blog/spam_free_accessible_forms/

    I have not successfully got any of these methods to work for some reason with my php contact form. Anyone that is proficient in PHP wanna make a quick buck?

  • #21 / Dec 23, 2008 12:56pm

    giovanni

    209 posts

    what is the solution for those of us using the Contact Form that is part of EE in an EE template?

    the PHP solution mentioned by Eric   sounds good, but how would we implement that within the template with the contact form?

    The ExpressionEngine Blacklist module can be used (with the downloadable blacklist) to block such content if it appears as part of a link.

    The problem is that the FROM field is my address and the TO field is the same. And hey are using my smtp mailer. How this can happen i don’t know. I even tried changing the password.

    Last last night i temporarily disabled the account and spam has stopped.

  • #22 / Dec 23, 2008 1:08pm

    Derek Jones

    7561 posts

    What is your opening tag for your contact form, giovanni?  As the warning on the page shows, if used improperly, it’s possible for the contact form to be effectively turned into an open relay.

  • #23 / Dec 23, 2008 1:14pm

    giovanni

    209 posts

    I have not noticed a WARNING page.. where is this found?

    here is what i have:

    !-- CONTACT US -->
     <div id="main"> 
    {exp:email:contact_form user_recipients="false" recipients="[email protected],[email protected]," charset="utf-8"}
    <h2>Contact Us!</h2>
    <p><label for="from">Your Email:</label><br />
                                        <br />
    <input type="text" id="from" name="from" size="40" maxlength="35" value="{member_email}" /></p><br />
    <label for="subject">Subject:</label></p>
    
    <p><input type="text" id="subject" name="subject" size="40" value="Contact Form" /></p><br />
    <label for="message">Message:</label></p>
    
    <p><textarea id="message" name="message" rows="18" cols="40">  Email from: {member_name}<br />
    Sent at: {current_time format="%Y %m %d"}</textarea></p></p>
    
    <p> ......<br />
    <input name="submit" type='submit' value='Submit Form' /></p><br />
     <br />
    <input type="text" name="captcha" value="" maxlength="20" /></p> <br />
    {if captcha}</p><h3>Please enter the word you see in the image below (helps to thwart spam):</h3>
    <p><div id="subnav"><br />
     {captcha} <br />
    </div><br />
    {/if}</p>
    
    <p>{/exp:email:contact_form}

  • #24 / Dec 23, 2008 1:19pm

    Derek Jones

    7561 posts

    The pink note at the bottom of the page of the contact form documentation.  Just the opening tag is necessary:

    {exp:email:contact_form user_recipients="false" recipients="[email protected],[email protected]," charset="utf-8"}

    You have user_recipients turned off, so they wouldn’t be able to add their own recipients in by manipulating the form.  So it sounds like they’re just spamming you?  Not really any way to avoid that without using one of the methods talked about above, and even then you’re never going to have 100% success.

  • #25 / Dec 23, 2008 1:26pm

    giovanni

    209 posts

    Yes i am the only one being spammed the other two email recipients are not ... i can confirm that as one of those is forwarded to me at a secondary email account.

    so if it’s only me i can just hit delete .... i was just worried that i was a relay point that spammed others…

    cheers

  • #26 / Dec 23, 2008 2:49pm

    Derek Jones

    7561 posts

    Have you checked outgoing email server logs to see, giovanni?

  • #27 / Dec 23, 2008 3:53pm

    giovanni

    209 posts

    emmm ..where are these logs… i can’t find them under the Admin tabs

  • #28 / Dec 23, 2008 4:01pm

    Derek Jones

    7561 posts

    These are not ExpressionEngine logs, these would be logs with your email provider, the SMTP host.

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases