Spam through our website...
Discussion
My parents have a couple of websites for their businesses; www.dunvalanree.com and www.carradalecottage.co.uk
Both sites have enquiry forms for visitors to fill out for more information, and this is e-mailed to my parent's account.
But there is loads of spam coming through this, which seems pointless, and just takes up a lot of time.
Emails arrive, and they are the enquiry form, but for each question, the answer is just an e-mail address such as dhg@nvalanree.com
How can we stop this annoyance? We get loads!
Cheers, Robbie
Both sites have enquiry forms for visitors to fill out for more information, and this is e-mailed to my parent's account.
But there is loads of spam coming through this, which seems pointless, and just takes up a lot of time.
Emails arrive, and they are the enquiry form, but for each question, the answer is just an e-mail address such as dhg@nvalanree.com
How can we stop this annoyance? We get loads!
Cheers, Robbie
I've started to see this through my personal site. I think some spam robot thing is just trying to exploit web forms - it's a pretty common thing to be honest.
Only thing I can think is to code something into it to prevent the process being automated.
Maybe take the form input, write it back to the page and then ask
"do you want to send this email".
[yes] [no]
This should stop the vast majority of automated attempts to abuse it.
Only thing I can think is to code something into it to prevent the process being automated.
Maybe take the form input, write it back to the page and then ask
"do you want to send this email".
[yes] [no]
This should stop the vast majority of automated attempts to abuse it.
1.) You could use a script which shows a random image with characters. In order to send the email , users have to type the characters displayed.
A verification code which many *large* websites use.
2.) I Had a quick look at your websites.
The mailto: links for your contact emails is a big no no. You need to convert them from plain text (ascii)to encoded emails.
Basically spammers crawl websites looking for simple email addresses to add to their databases.
If you encode it (using free tools available on the web) their spiders/crawlers have to work harder ...they normally give up and look for an easier target.
Do a google search for "email address encoder" and type your address in. Then cut and paste this into your html page.
R
A verification code which many *large* websites use.
2.) I Had a quick look at your websites.
The mailto: links for your contact emails is a big no no. You need to convert them from plain text (ascii)to encoded emails.
Basically spammers crawl websites looking for simple email addresses to add to their databases.
If you encode it (using free tools available on the web) their spiders/crawlers have to work harder ...they normally give up and look for an easier target.
Do a google search for "email address encoder" and type your address in. Then cut and paste this into your html page.
R
_dobbo_ said:
I've started to see this through my personal site. I think some spam robot thing is just trying to exploit web forms - it's a pretty common thing to be honest.
Yes, thats most likely it.
Formmail used to be the single biggest method of getting spam out, insecure scripts that allow the parsing and processing of CC: blah@blah.com in their text boxes etc.
We get it every so often on client installed scripts on the Register1 VDS's, we simply check the weblogs and Deny the IP range of the originator (typically Korea / China / Russia)
Simply code some security checks into your scripts (like disable all magic characters, only allow the mail to be sent to the hard-coded address, a local address is even safer etc)
You need to get this resolved tho, else you will find yourself (domain) on a blacklist, which will actually stop your clients being able to mail you, or get mail from you.
J
JamieBeeston said:
I've started to see this through my personal site. I think some spam robot thing is just trying to exploit web forms - it's a pretty common thing to be honest.
Yes, thats most likely it.
Formmail used to be the single biggest method of getting spam out, insecure scripts that allow the parsing and processing of CC: blah@blah.com in their text boxes etc.
We get it every so often on client installed scripts on the Register1 VDS's, we simply check the weblogs and Deny the IP range of the originator (typically Korea / China / Russia)
Simply code some security checks into your scripts (like disable all magic characters, only allow the mail to be sent to the hard-coded address, a local address is even safer etc)
You need to get this resolved tho, else you will find yourself (domain) on a blacklist, which will actually stop your clients being able to mail you, or get mail from you.
J
My sites written in a proprietary coding language, and the form is hard coded to send to me.
What I'm seeing is MIME encoded data being pasted into the message field in an attempt to fool the form. It's not working, as the mail comes to me, but it's annoying to keep getting these!
Might have to get
and sort itGassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff