Emails from myself!!

**Jonathan Mark Sharp** · 10-24-2007, 12:11 AM

I am wondering if someone can help me please.

I have created an additional email address info@susancoates.co.uk which I use to receive emails from the contact form in my website. I did test this and it seemed to work however...I keep on receiving emails entitled "Re: Contact Form Submission" which therefore appear to originate from the Contact Form but are coming from my own email address.

I have now had 20 or so such emails and I am concerned I am missing enquiries from the site.

Any help in solving this would be greatly appreciated.

**Andy128** · 10-24-2007, 12:45 AM

Can you please post the form URL and then cut and paste in this thread, the php code that you are using to process your form.

Andy

**Jonathan Mark Sharp** · 10-24-2007, 01:05 AM

Andy,

Hi. Thanks for your help.

The URL of the contact form is: www.susancoates.co.uk/contact.html

The code from the action file is as follows:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Thank You</title>
<meta http-equiv="Page-Enter" content="blendTrans(Duration=0)">
<meta name="GENERATOR" content="Created by BlueVoda">
<script type="text/javascript">

</script>
<script type="text/javascript">

</script>
</head>
<body bgcolor="#FFFFFF" text="#000000" style="scrollbar-face-color:#F0F0F0;scrollbar-arrow-color:#000000;scrollbar-3dlight-color:#193A59;scrollbar-darkshadow-color:#696969;scrollbar-highlight-color:#AAB5C0;scrollbar-shadow-color:#A0A0A0;scrollbar-track-color:#DFDFF9;">
<?PHP
$mailto = "info@susancoates.co.uk";
$email = $HTTP_POST_VARS['email'];
if ($email == "") {
$email = $mailto;
}
$mailsubj = "Contact Form Submission";
$mailhead = "From: $email\n";
reset ($HTTP_POST_VARS);
$mailbody = "Submitted from Contact Submission Form :\n";
while (list ($key, $val) = each ($HTTP_POST_VARS))
{
if ($key!="submit")
{
$mailbody .= "$key : $val\n";
}
}
mail($mailto, $mailsubj, $mailbody, $mailhead);
?>
<img src="m_125a.gif" id="Image1" alt="" align="top" border="0" width="1003" height="715" style="position:absolute;left:0px;top:0px;width:10 03px;height:715px;z-index:0">
<img src="Susan Coates.JPG" id="Image2" alt="" align="top" border="1" width="116" height="136" style="position:absolute;left:56px;top:6px;width:1 16px;height:136px;border-color:#4E677F;z-index:1">
<div id="bv_" style="position:absolute;left:493px;top:622px;widt h:245px;height:26px;z-index:2" align="left">
<font style="font-size:11px" color="#193A59" face="Verdana">© Susan Coates 2007 - all rights reserved</font><font style="font-size:11px" color="#193A59" face="Arial"> </font></div>
<div id="bv_" style="position:absolute;left:56px;top:161px;width :118px;height:309px;z-index:3" align="center">
<table border="0" cellpadding="0" cellspacing="0" id="NavigationBar2">
<tr>
<td align="left" valign="top" width="118" height="29"><a href="./index.html" target="_self"><img id="bv01116" src="bv01116.gif" alt="Home" title="Home" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01116','bv01116_over .gif')" onmouseout="SwapImage(0,0,'bv01116','bv01116.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./biography.html" target="_self"><img id="bv01117" src="bv01117.gif" alt="Biography" title="Biography" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01117','bv01117_over .gif')" onmouseout="SwapImage(0,0,'bv01117','bv01117.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./repertoire-main.html" target="_self"><img id="bv01118" src="bv01118.gif" alt="Repertoire" title="Repertoire" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01118','bv01118_over .gif')" onmouseout="SwapImage(0,0,'bv01118','bv01118.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./engagements.html" target="_self"><img id="bv01119" src="bv01119.gif" alt="Engagements" title="Engagements" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01119','bv01119_over .gif')" onmouseout="SwapImage(0,0,'bv01119','bv01119.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./reviews.html" target="_self"><img id="bv01120" src="bv01120.gif" alt="Reviews" title="Reviews" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01120','bv01120_over .gif')" onmouseout="SwapImage(0,0,'bv01120','bv01120.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./audio_clips.html" target="_self"><img id="bv01121" src="bv01121.gif" alt="Audio Clips" title="Audio Clips" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01121','bv01121_over .gif')" onmouseout="SwapImage(0,0,'bv01121','bv01121.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./photo_gallery.html" target="_self"><img id="bv01122" src="bv01122.gif" alt="Gallery" title="Gallery" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01122','bv01122_over .gif')" onmouseout="SwapImage(0,0,'bv01122','bv01122.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./links.html" target="_self"><img id="bv01123" src="bv01123.gif" alt="Links" title="Links" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01123','bv01123_over .gif')" onmouseout="SwapImage(0,0,'bv01123','bv01123.gif') "></a></td>
</tr>
<tr><td height="6"></td></tr><tr>
<td align="left" valign="top" width="118" height="29"><a href="./contact.html" target="_self"><img id="bv01124" src="bv01124.gif" alt="Contact" title="Contact" align="top" border="0" width="118" height="29" onmouseover="SwapImage(1,0,'bv01124','bv01124_over .gif')" onmouseout="SwapImage(0,0,'bv01124','bv01124.gif') "></a></td>
</tr>
</table>
</div>
<div id="bv_" style="position:absolute;left:358px;top:40px;width :517px;height:76px;z-index:4" align="center">
<font style="font-size:37px" color="#FFFFFF" face="Segoe Script"><b>Contact<br>
</b></font></div>
<div id="bv_" style="position:absolute;left:58px;top:477px;width :115px;height:78px;z-index:5" align="left">
<a href="http://www.vodahost.com/partner/idevaffiliate.php?id=7790_0_1_55"><img src="http://www.vodahost.com/partner/banners/16.gif" border="0"></a></div>
<div id="bv_" style="position:absolute;left:253px;top:473px;widt h:722px;height:106px;z-index:6" align="left">
<iframe src="http://rcm-uk.amazon.co.uk/e/cm?t=susancoatesco-21&o=2&p=48&l=st1&mode=classical&search=opera&fc1= 000000&lt1=&lc1=3366FF&bg1=FFFFFF&f=ifr" marginwidth="0" marginheight="0" width="728" height="90" border="0" frameborder="0" style="border:none;" scrolling="no"></iframe></div>
<div id="bv_" style="position:absolute;left:419px;top:241px;widt h:393px;height:179px;z-index:7" align="center">
<font style="font-size:21px;BACKGROUND-COLOR:#FFFFFF" color="#193A59" face="Verdana"><b>Thank you for your message!<br>
</font><font style="font-size:16px;BACKGROUND-COLOR:#FFFFFF" color="#193A59" face="Verdana"><br>
<br>
<br>
</font><font style="font-size:19px;BACKGROUND-COLOR:#FFFFFF" color="#193A59" face="Verdana">Your query will be dealt with as soon as possible and I will get back to you shortly</font><font style="font-size:16px;BACKGROUND-COLOR:#FFFFFF" color="#193A59" face="Verdana">.<br>
</font><font style="font-size:13px;BACKGROUND-COLOR:#FFFFFF" color="#193A59" face="Verdana"></b><br>
</font></div>
</body>
</html>

**Andy128** · 10-24-2007, 02:19 AM

Remember, the code as written puts your e-mail address in the e-mail address slot if the person filling out the form does not put THEIR e-mail address in the form. Threrefore, if someone simply hits submit, you will receive an email that says it is from your e-mail and it will be blank (if they don't fill in any fields).

Could that be the problem?

As it looks- the form and php script are ok.

Andy

**Jonathan Mark Sharp** · 10-24-2007, 07:16 AM

Andy,

Thanks for the advice.

It is kind of curious that people would hit submit without entering any data... if this is correct at least it looks like we are not missing out on important emails.

Is there a way of changing the script so that if they hit the submit button without their email and/or text that it provides an error message AND doesn't send a "false" email? The php file was not part of the ABVFP v2 would using this sort it out?

Thanks

Jon

**Andy128** · 10-24-2007, 01:19 PM

Bots are programed to surf the net and pick out vulnerable forms. They will often do false submissions or your received e-mail will contain a bunch of garbled **** as a message or input. And yes- even individuals will hit submit just for the heck of it.

Yes to both. You can set it up that he e-mail field is mandatory in the field properties of the form (as well as any other field for that matter). I am not at my home computer so I cannot give specific instructions as to what to check in the field properties- but I believe that it is fairly self explanitory.

Yes- using ABVFP will give you options to further customize your form and protect it from false submissions as well as from form injection attacks (which are very common).

I would suggest the first solution above to implemented now and then download and try the ABVFP on a TEST form. In this manner, you will not create any down time for your current form. If when you get the ABVFP all worked out- simply replace your existing form.

Cheers-
Andy

**Jonathan Mark Sharp** · 10-24-2007, 09:13 PM

Andy,

Thanks so much for your help.

I have tried to find the place in the form properties to make the email a compulsory field but can't find it so would appreciate your advice when you can get round to it please.

The form currently has the email field marked with an asterix to denote it is a mandatory field but I presume that this of itself is not enough to make it mandatory.

I will explore the BVAFP but will need a little time to get my head round that I think, so will need a short term fix.

Best Regards,

Jon

**Marincky** · 10-24-2007, 10:34 PM

I learnt something from George (Naval) the other day. If someone visits the 'action' page, i.e the page that the person filling in the form is taken to, this will automatically submit a blank form to you. It's more likely this than someone just hitting your submit button.

**Andy128** · 10-24-2007, 11:19 PM

Jonathan- I will give it a look when I return home tonight.

Andy

**Supermax** · 10-26-2007, 03:38 AM

Originally Posted by Marincky

I learnt something from George (Naval) the other day. If someone visits the 'action' page, i.e the page that the person filling in the form is taken to, this will automatically submit a blank form to you. It's more likely this than someone just hitting your submit button.

I think George (Naval) made a simple code you put infront of the tag and then you wont get thoose blanc emails.
I just can`t find the post he wrote.

**Andy128** · 10-26-2007, 02:44 PM

On the field that you want required- double click to get properties. Then in the top row, choose the validate tab. Then start setting the criteria that you want for that field.

Data Type can be - No Constraints, Text, Number or E-Mail address

PUT A CHECK IN THE CUSTOM MESSAGE

In the error message- Type in what you desire to say about that message. Example: " Please type in your Name in order to submit this form"

PUT a check in DATA REQUIRED- that will make the field required and trigger the checks that you are setting up as well as the error message.

In the next fields you can even specify the text and number formats and lengths.

Save and publish.

Cheers-
Andy

**Jonathan Mark Sharp** · 10-27-2007, 09:05 PM

Andy,

thanks for the advice. I have made the changes and tested the error messages which appear to be working fine.

Regards

Jon

**Jonathan Mark Sharp** · 10-29-2007, 11:56 AM

Andy,

It has happened again - another email from my own account to myself.

Having done all of the above as you suggested (which I have tested and seems ok) I am now even more confused as to how I am getting these!

Jonathan

**Andy128** · 10-29-2007, 02:26 PM

I have sent you a test in your form. If there are 3 or more that have test in all the fields- please post back and let me know.

Andy

**Jonathan Mark Sharp** · 10-29-2007, 11:08 PM

Andy

I have received one email that I presume is from you with "test" in the fields. Following that I had another four apparently received from myself all at 8.24 GMT only seconds after your email. The subsequent emails had nothing in the fields though

This is really getting quite strange...!

Regards

Jonathan

**Andy128** · 10-30-2007, 12:25 AM

It would appear that some one has bookmarked your action.php page and upon bringing it up in their browser- it sends a blank email.

For this I believe we should test to see weather the "Submit" button was pressed. If it hasn't, then the page will simply re-direct back to the form.

I am not where I can look up and write that bit of code. Give me an hour and I will have something for you.

In the mean time, try it your self by going directly to the action.php page with out going through the form. Do it a few times and then check your e-mail.

Andy

**Andy128** · 10-30-2007, 01:13 AM

Jonathan-
Replace your php script with this one:

<?PHP
if(!isset($_POST['submit']))
{
echo"<br /><br /><center>You must us the submit button in order for the data to be sent. Please use the<br /> back button and then hit submit.</center>";
exit;
}
else
{
$mailto = "info@susancoates.co.uk";
$email = $HTTP_POST_VARS['email'];
if ($email == "")
{
$email = $mailto;
}
$mailsubj = "Contact Form Submission";
$mailhead = "From: $email\n";
reset ($HTTP_POST_VARS);
$mailbody = "Submitted from Contact Submission Form :\n";
while (list ($key, $val) = each ($HTTP_POST_VARS))
{
if ($key!="submit")
{
$mailbody .= "$key : $val\n";
}
}
}
mail($mailto, $mailsubj, $mailbody, $mailhead);
?>

That should stop it. Make sure to test it throughly.

Andy

Thread: Emails from myself!!

LinkBack

Thread Tools

Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Re: Emails from myself!!

Thread Information

Users Browsing this Thread

Posting Permissions