Thread: Form Security and Spam

Not sure if this is the right place for this but here goes.

I have several sites up with some pretty detailed contact forms for people to get info about health insurance. Last week I started getting these forms submitted to me filled with links about buying ******, cialis etc..... these are coming in with about 30-50 links in each one and I am getting about 20 per day that are dong this from my website. I have removed my "Comments" box from the form as that was the section that they were filling up but it didn't really help.

Does anyone have any ideas on how to get this to stop?

Are they coming from real people, or is some form of webbot accessing your form ?

If its the latter, you can deny bots access using robots.txt. There is help here on that, I asked about it a while back. I havent actually blocked any part of my site yet, so cant tell you the mechanics, but it did look easy to do.

You can not stop spammers from filling out your contact form multiple times, this is all part of doing business on the internet. Just deal with and move on, we spend about 10 minutes a day deleteing spam from forms.

What can do is design your contact form so that it does not accept multiple submissions from the same IP address. This will stop the begginer to average spammer from hitting your form, but it will also stop legitimate customers from contacting you more than once.

Originally Posted by apricotslice

Are they coming from real people, or is some form of webbot accessing your form ?

If its the latter, you can deny bots access using robots.txt. There is help here on that, I asked about it a while back. I havent actually blocked any part of my site yet, so cant tell you the mechanics, but it did look easy to do.

The problem with your idea, is that it will stopped the repeat spammer but not the new spammer.

A spammer by definition is not a spammer until they post there junk on your site. Until that point they are just a normal visitor.

Hey,

Yeah, I have been getting the same problem, I went to go check my form e-mails and I had the same thing, not sure if I have his location yet, but I will try to contact this person.

.. and now for some reason my e-mail doesn't work at all? Something going on ..?

There are some things you can do, generally speaking, to avoid part of the spam emails.
To avoid your form script being used to send spam emails to others:
1. Use ABVFP. If the form is properly setup, it will block attempts to send mass emails to third persons. Even the comments textarea, will only accept one or no email addresses at all. No pro spammer is going to loose his time in sending out (manually) spam emails, if he has to manually fill in everytime the form. And, he won't even bother to send YOU a spam email this way. ABVFP will also detect and block any attempt to use your script overriding the form (this is what pro spammers do, they have a bot automatically submit directly to your script, without going through your form).

2. If you need to place a direct mail link on your site, encrypt it. Bots will not be able to find it (at least not easily)

Originally Posted by navaldesign

2. If you need to place a direct mail link on your site, encrypt it. Bots will not be able to find it (at least not easily)

How do you do that ?

http://www.dynamicdrive.com/emailriddler/

Hey,

Thanks George, but what I am going to do is set a 1 message limit per week through the form with that I.P address .. think its a good idea?

No. For most users, IP changes dynamically as soon as they disconnect and then connect again. Each serious ISP provider has hundreds (or even thousands) of IP addresses, so this will not help you at all. Just make a secure script. As soon as the spammer sees (automatically) that he is not succesfull in sending you spam mails, he quits.

And, ofcourse, you can also incorporate a captcha in your form.

Ah ****! Yeah thanks for reminding me! I completly forgit! I accually set my I.P to change every minute myself.

Hi, sorry to step in!
But wasn’t there something in c cannel where you could enable a facility that made emailers have to put a randomly generated 4 digits in a box to enable the email to be sent. (This only had to be done once) Think it may have been called box trapper. Its in the help in c panel but not available in the main panel any more? I believe this was to help with spam.

Having just looked at your form- you have no error checking. In other words, if they fail to fill in a name or a phone number the form will still submit. I suspect that your form has been found by bots and has been deemed vulnerable. It is most likely being auto filled by the bot program. You can stop this type attack.

You will need to implement some security measures such as: limiting the text fields, strip_tags, and replacing in @ in the comments box. Additionally- you should create a picture of numbers -say: 1569 and place it on the form. Then have the customer input the number in a text box. Then the script would check for that input, if it is not there- the form will not be sent. This will stop bot injection but not humans direct filling out your form. However- humans will not sit and take the time to fill out your form to spam you.

Using the ABVFP as Navaldesign has suggested would be the best solution. It is an easy to use program and very
secure. Naval is very proficient at this.

I too will be happy to assist if you'd like. If you'd like to try on your own first- here are some detailed instructions:
http://www.netisopen.com/computer/TF001/phpmailto.html

Andy

any new updates to this..it didn't work correctly, no matter what combination of errors i put in i still got the same messege, and when everything was correct i got a message..

thanks for your help

beebrothers-

Are you sure your on the right thread? I have no idea what you are talking about. Please be more specific.

Andy

i used this tutorial from your above post: http://www.netisopen.com/computer/TF001/phpmailto.html

to secure my form and it works about 90% but has some issues that i cant tweak out..

after i followed the tutorial i went to my contact form and entered info incorrectly to test it, no matter what combos i used i got the same error message. for instance right name, wrong email i got error your name is wrong, every time..and when everything was right i still got a name is wrong error and no submission...

i cut and pasted the script and just changed the values in blue to my info, i didn't change anything else (yet)

Generally this occurs when the field name (i.e. "email", or "name") is different from that in the script.

For instance- if the field name is "name" and in the script it is "Name", then it will always give an error as it is checking for "Name" and not "name" with a lower case. Be sure to match exactly.

Give that a try and I believe your troubles will be over.

Andy

i got it now, i had the field names in the right click properties box t1 t2 t3, instead of name email comments...all seems to be working just ducky...

one more question: at the end how do i set this: echo "Thank you for visiting our site and filling out our form. We will get back to you very soon!"

to redirect the person to a nice thank you page and not the error page with a thank you?

thanks for taking the time help

i've been messing with the code a little :) :) :) but i cant get it to open a nice thank you page, instead of the error page with a thank you, i'm over my head and the water's only a half inch deep...hehe

Thanks for all of the help Andy and Naval. I am going to try this today. I have to wade thru about 100 new spam emails today and hopefully not delete any new clients inquiries in the process.

How do I install a capchta?

I am going to work on this later tonight. I'll let you all know how it shakes out for me.

I love this place!

Beebrothers-

The way You have it set up is fine. Simply state in the last line someting like this:

Thank you for visiting our site and filling out our form. We will get back to you very soon! Please feel free to use the menu on the left to continue browsing our site.

It looks fine the way you have it. Even if you changed nothing- they would see the menu on the left and could eaisly figure out how to continue browsing.

Just my opinion.

Andy

motoxxx-

Due to the volume- you are being spammed via a bot. What I described above will solve this. You can have a simplified captcha by creating a gif or jpeg of numbers. Then place this on your form and instruct you user to enter the numbers as seen. Since the bots do not read pictures ( and dont name your jpeg or gif) they will be unable to get past this step.

Look at one I use on my site;
http://netisopen.com/computer/contact/ccform.html

This, along with the security measures previously discussed will likely
fix all your porblems. The big threat is bots- not humans hijacking your form personally.

Let us know how it works.

Andy

Originally Posted by beebrothers

i've been messing with the code a little :) :) :) but i cant get it to open a nice thank you page, instead of the error page with a thank you, i'm over my head and the water's only a half inch deep...hehe

Wow my very first post here. Do I get a gift? :)

I think this link can help with your prob there beebrothers, It worked for me. scroll down below the tutorial. Hope it works for what you are looking for.
http://www.vodahost.com/vodatalk/for...-part-1-a.html

Originally Posted by Syllied

Wow my very first post here. Do I get a gift? :)

I think this link can help with your prob there beebrothers, It worked for me. scroll down below the tutorial. Hope it works for what you are looking for.
http://www.vodahost.com/vodatalk/for...-part-1-a.html

Haha, wow, first post and already helping out! .. we got a keeper here! .. welcome to the forum buddy!

Originally Posted by Syllied

I think

i had the action page prior to using the above system of protection, the action.php works great but i can't point the process123 code to the action (thank you) after form submittal.

I solved that by making my "error" page more thank you friendly :)

thanks everyone...

now to try and figure out the enter code operation :)

Beebrothers: I'm sorry but i don't understand any of the above. There are 3 well known and tested (in this forum) ways of having error page, thankyou page and security:

1. Using the tutorial way, but implementing some lines of security check (this requires some additional coding on your part). If you go this way, since the script is implemented in the thankyou page itself, the script has to be placed in the "Start of page" tag, instead of the Inside Body Tag.


2. Using Andy's script, and modifying the last line (echo "Thank you for visiting our site and filling out our form. We will get back to you very soon!"; )
with this one:
header("Location: thankyou_page.html");

The error messages are directly echoed, no separate page.

3. Using ABVFP which already has built in all of these and more (as multiple select, multiple upload, autoresponder, security, required fields, email checking, customizable error and thankyou pages, customizable headers and footers for the main mail and the autoresponder mail, illegal form submission check, etc).

You have so many different options that i do not understand why you should have any problem.

Naval, i had the script like the tutorial with an action page that had a thank you, that worked great, but i was under the impression it wasn't top knotch security.

i then did andy's way with the process123 and it works great, except when you enter the info correct and send it, you get the thank you memo but its on the error page, instead of the nicer thank you page i.e. my action page from the first method...
what i have with andy works great, i just changed the "ERROR" to "NOTE:"
so when you submit the form right you get a little warmer page.

i will try the header("Location: thankyou_page.html"); in place of the echo

Why don't you use ABVFP ? it has ALL the security measures Andy has in his script, plus many more, it has thankyou page, error page (all customized by you) plus many other features that make it a complete form processor.

is this: Advanced BlueVoda Form Processor : No coding form script! Just install and use!

what you refer to as ABVFP??

thanks..

Yes, that's the same, but the main thread is in http://www.vodahost.com/vodatalk/for...processor.html

For a real case example, have a look here

wow..thats complicated..(abvfp)

i might keep Andy's method? i don't have enough hair left to attempt the abvfp

:)

ABVFP is EASY. It requires no scripting at all, it just requires you to follow the installation procedure and then run a very friendly user interface. Practically, it consists of a form where you simply fill in your preferences. Then the script processes your form according to your preferences.

And, ofcourse you can use Andy's script (easier to install). ABVFP has addittional features, that allow more things, but it needs 15 - 20 minutes of your time to install it.

You cannot STOP spam, you can only cut it down.....

If your code includes the check below then no more than 2 email addresses
can be used in the text area on any form:.

if (substr_count($comments, '@') > "2")
{
header("Location: comments_error.html");
exit;
}

Besides, most of the spam comes from bots or humans scouring the web
for email addresses, and if you try to send them an email they know that they have scored a hit and will keep sending auto emails to you.

I am now receiving spam from the idiots that are using the voda ping or trackback system
so now all those go to my spam box now.

Where do I place this code?

I have ben messing with AVBFP and it does seem like it is confusing. I certainly appreciate all of the work that Naval has put into it. I am going to try reading the whole install process again when I am not quite so tired.

It seems that now this idiot that is spamming my forms ahs found all of my other sites as well. I am getting approx 50 of these per day at the moment.....

I don't need ******, cialis, or any other medication and I really don't understand how these jerks that send out these massive spam campaings can find enough stupid people to buy from them....

Unbelievable.

ABVFP has already all of this in it's code. And not only in the commets field, but in ALL fields. And it can be 0, or 1.

Give ABVFP another shot when your not so tired, its well worth the effort.

If you have any probs, I am sure that Naval will sort it out.

Originally Posted by navaldesign

ABVFP is EASY. It requires...15 - 20 minutes of your time to install it.

set your clock, here goes nothing..

ok. on step two, so far no problem, how am doing on time :p

stop the timer i think i got it..just need to test in seven different ways..

i didnt get the set permission to 777 on the upload folder tho, i couldnt figure that one out??

yepper the upload option doesnt work...hmm

everything else seems great..even with several varieties of errors

and also when i was doing the http://beebrothers.org/ndadmin.php in my browser i got an 404 error when i clicked general config..

everything else works fantastic..thank you for your time, drinks on me..superb

ok, thats all i can do 2 hours..not bad considering what we get...
i had to change the appearance of the pages as i went, that took some time, still need to spruce them up a tad bit..

everything works great except:

the upload thingy part
the autoresponder doesnt send and email to the form email

i am happy as a clam i hate spam..hehe

Ok, i have tested it. Your autoresponder works, i got the autoresponder mail. Maybe some problem with your email or your typing the email address. The upload probably doesn't work, because you have not set the permissions to 777. If it is anything else than 777, it will not work. Connect with FTP, right click on the "uploads" folder, and then select "permissions" (or properties). Set it to 777 and it will work. Alternative solution: delete the entire uploads folder. The script will create it correctly, by itself, in the first upload.

I also advise always, to publish a blank "index" page, or an index page with a redirect code, in the "uploads" folder. This is a necessary security measure, because if someone types www.yourdomaqin.com/uploads he can see your folder content. So, if he uploads a malicious script, he can then run it and hack your site. Alternatively, name your folder with another name, not "uploads", when you run the ndadmin.php .

As for the 404 Page not found error when you generate the configuration file, you get that because you probably have not published on your site the "ndconfirm.html" file. Do it and it will all be ok. However, it will also work even without it. It is just a confirmation page.

However, i would change some of the things in your form:

Company, address etc fields are NOT set to check for the @ symbol, so they may eventually allow spamming. Set the extensions to be -A or -B (depending on the desired field lenght) so they will not allow this.

ok, i tended to a few details prior to heading out this am, i'll be back in a few hours to continue.

1st, your email upload opened no problem until i started tweaking.

then i created a blank index page that is inside the uploads folder and published it, that seemed to fix the (if someone types www.yourdomaqin.com/uploads he can see your folder content) issue.

ndconfirm i published again after changing the properties to html, i first published it as a php, that fixed that issue.

i need to "set the extensions" to A or -B when i get home, i think i can figure that out, i THINK.. :)

after i did all this your upload didn't open, now do i create a "upload" folder within the ftp manager and/or the file manager within the public_html folder?

i'm still confused on the uploads folder with scenrio

grazie amico

hmm..

not sure how to set extensions to A or -B

submittal without an upload is ok (whatever i did since you tested it messed it up)

submittal with an upload i get the file in the email but when i click on it it opens my blank upload page instead of the file and also the confirm page shows me an error:
Warning: chmod() [function.chmod]: Not a directory in /home/fchjvsex/public_html/abvfp.php on line 326

Warning: Cannot modify header information - headers already sent by (output started at /home/fchjvsex/public_html/abvfp.php:326) in /home/fchjvsex/public_html/abvfp.php on line 395


i'm stuck, but hey almost there..

thanks

ok solved the field proprerties issue, now still stuck on the upload issue, went back to the tutorial file and starting that process from nil, we'll keep ya posted..

ok everything is worked out, i think except the - to publish a blank "index" page, or an index page with a redirect code, in the "uploads" folder. This is a necessary security measure,

i still see the content

i don't know what a redirect code is?

and when i click the uploaded file in my email i get a 404 error page

tag your it..

Just create a page in BV, save it on your computer as "index" attention, in another folder, so it will not overwrite your normal index page, and then publish it in the "uploads" folder. What you have done with the "blank" page you have created, but save it (and publish it) as index.

okiee dokiee, seems everything is working, except i can't find the file that i upload, a browser 404 error opens when i click the upload in the email..
the file is in my upload folder and i can cut and paste the link into browser and get a open/save screen, is that how it's supposed to work?

and just checking to find out if the folder content is secure??

and i promise to leave you alone :)

grazie amico

Ok, one thing at a time:

1. Include this code in the index page that you have published:

<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.beebrothers.org">

This will redirect anyone that tries to see your uploads folder, in your home page.
2. If the file name contains blanks, then yes, the only way is to copy the link, paste it in your browser address bar, and it will open in your browser. If the file name doesn't contain any blank spaces, it will work directly clicking on the email address link.

ok, code inserted into html properties/start of page

when i put http://www.beebrothers.org/uploads into browser it redirects it to my home page

thats good i take it :)

yes my test file had a blank space, my test page now without a space opens in a browser..

your awesome, 15-20 minutes just like you said

thank you

Well, you may have taken more than 15 - 20 minutes, but you have also edited the pages (which takes time) And, of course, i meant 15 - 20 minutes to simply upload the pages and have the script working. As for customization etc, it is intended that you need more time.

Please note that you can use your own form (s), it is not necessary that you use the example form that comes in the package.

The code should go in the Between head Tag, but it works the same in the Start of page.

I'M NOT TOUCHING IT :)

will move the code

i added the A / B /C properties to the fields, so i'm done

but i will continue to customize them..

thanks again for your help, two thumbs up

Now, my next project :) :)

shopping cart
spruce up forum appearance

next week

thanks again

I am still a bit confused on some of this stuff. I will study it a bit further but I am spending so much time running thru my spammed requests that I can't seem to get anything else done.

motoxx-

Look at my form here and fill it in making sure to leave a couple blank to show the error page and reporting. IF you like that method- let me know using this contact form and I will help you write a secure script.

Cheers-
Andy

Never mind.............you got it covered

moto...
i read somewhere maybe Naval posted it, and i might be wrong, but i thought someone suggested not having your email address spelled out in a link such as you have in
http://www.affordablemedicaldental.com/contact.html


i thought i read it was better to mask it in a button...

someone might know better...i read too much here to rememeber how to find it again..

glty

p.s. your grey on grey nav. links at http://www.health-insurance-washington.com/ on the bottom are hard to read

Thanks BeeBrothers. The grey on grey was a CSS thing I was playing with for conversion on an old test page. I just forgot to remove it. Thanks.

The link in affordablemedicaldental.com/contact.html isn't the problem at all. I may change it to a button anyway just to be safe.

The biggest probelm is the forms getting spammed. I am getting about 100 a day now. Very frustrating.


Andy, I did use your form and I have shortened my field charachter lengths as well and I am still getting them. Tomorrow I am on a mission to get this solved. I have another more important project that needs my attention for today.

Thanks every one so far....

I'll check in tomorrow after I try all of this further.

Andy, I looked at the captcha on your form and I know I can make the image with the numbers on it and place it on the form. My question is how do I make it mandatory that it be filled in exactly?

I am really new to web stuff and script and this security part is giving me a bit of a head ache.....

You folks are all awesome!

Simply ad the captcha jpg or gif onto the form. Then create a text field
underneath it and name the field- captcha

Then in your script- declare that 'captcha' gathered from the form will
be stored in the variable $captcha. Then declare that the numbers will
be stored in a variable named- $security_code. Then test for it like so;

$captcha = $_POST['captcha'];
$security_code = "69234";
if ($captcha == "")
{
echo" You have failed to enter any numbers at all. Please do so
for security reasons. Thank you!";
}
elseif ($captcha != $security_code)
{
echo" The numbers you entered do not match those present on
the form. Please try again.";
}


If they entered the correct code- the script would simply continue on.

Hope that helps.

Andy
PS- if it is a true injection and they are using your form- Then by limiting the number of characters in the php script (NOT ON THE FORM) will prevent them from sending out tons of e-mails.

Hello, My Friend!

Question:
Do you still have your previous version of validated email form (the one where you can create separate pages for acknowledgement, error, etc. rather than the simplified version now up on your site)??

Like the one done at WordPointe.com??? It is easier for me than Naval's Grand Plan, and seemingly more "customizable" than your updated one-page-processing version......

Vasili-

Yes- actually, it is rather simple. For each error you will create a specific
error page and then instead of echoing the error in a statement, you will simply redirect to that specific error page. It would look like this;

For example to check if a field is left empty:

if ($name == "")
{
header("Location: name_error.html");
}
elseif
{

Is this what you are referring to?

Andy

Vasili,

if you want, just give me the necessary details and i will install ABVFP for you in no time.

Motoxx,

what is yet not clear to me is the fact that you say your form is being spammed because you get hundreds of spam mails.

Please explain: are these spam mails sent to you through your form ? Or are they simple emails ?

I have more than 30 forms published on the net, both for my sites and for VH turorials purposes, and i have only received 3 spam emails through my forms in 2 years.

Spammers don't loose their time in using your form just to send spam to you. If they use your form script, it will be for sending mass spam to third parties.

On the other hand it is easy to verify if these emails are sent through your form, or by directly emailing you. That's because when a mail is sent through your form, there is some standard text (the field names) that will also be mailed to you.

Please post here one of these emails, so we can have a look.

I too, have made the conceptual leap to Forms to minimize spam, and I get at least 2 per day from the forms I am presently using (many more from sites where I have yet to convert all Contact to Forms). Altugh they come in one at a time (as mentioned, getting the "carbon copy" of spam campaigns), I am puzzled at how they still come through with non-provided addresses: I don't have personal names, or "info@" addresses for example.

Interestingly enough also, I only get his spam activity from sites here at VH. Not wlling to open the dscussion that Carlos started, I am left to wonder besides locking down all email to Contact forms with only one "@" symbol in them, what more can I do to truly move past this potentially crippling side effect of being online???

I think I WILL take you up on your offer, General.....I must first write down all the logistics (I have quite a lot of Forms to be installed) to make the organization very clear and a "single-session" project for you to evaluate prior to committing to such an compensatable effort. Only then will I need to dutifullly study the Form cPanel to understand completely for further developments, for I think that once the immediate "problems" are solved, this will enable me to solidly progress in all my future projects.

PS: Why is this thread so hard to locate?? I only found it in the first place by following Keith's post, and can only return to it by tracing my own posts? It doesn't even show up on the board as active???

Vasili,

ABVFP is VERY easy to use. After installation, you simply run, for every form, the admin interface and you provide, typing, very simple information: the site, the form url, the subject of the email that you will receive, as well as that of the autoresponder email (that your user will receive), the headers and the footers of these emails.

That's ALL ! When you want, i'm at your service General!

Ah! the thread is actually moved to a "cleaning" zone by *****. After "cleaning" it will go babck in it's place.

Kataleveno, General. Soon.....

Eγώ Ευχαριστώ!

Naval, what is happening is that a Prescription Drug vendor has hijacked my forms somehow. I get these forms submitted to me from all of my sites everyday from clients. The form will come into my commercial Yahoo email account (forwarded from BV) just like it was a lead from any normal customer The fields are completed like someone had filled them out complete with email address, age, sex, type of insurance coverage desired etc.... Then in the "Comments" section there is a short note such as "Nice site, it is the best" or something really stupid, then there are links to approximately 50 different links to a database that the main vender is using as a link hub for their affiliates.

So over the last couple of days I have shortened the characters that each field will accept, changed the name of each field to see if I could confuse any bot that may be auto populating the fields etc. Still I am getting the emails....although on a few of them, the form fields that I renamed are now not being auto populated, they are being left blank or to <default>


Here is a copy of one of the these things....This one just came in...


AZ Health Ins Quote:
enam : <Default>
liame : <Default>
mabell : <Default>
****tywok : <Default>
nada : <Default>
Sex_Primary : Female
Your_age : 18
Primary_Tobacco: : ----
Sex_Souse : Male
Spouse_age : 18
Spouse_Tobacco: : Yes
Children : 1
Desired_Coverage : Major medical coverage
Current_Ins? : Continental General
Coverage_to_begin: : ASAP
saywhat : Great .Now i can say thank you!
<a
href=\"http://www.nsula.edu/itac/_disc1/00000032.htm?******\">******</a>
http://www.nsula.edu/itac/_disc1/00000032.htm?******
http://www.nsula.edu/itac/_disc1/00000032.htm?******]******[/url]
<a
href=\"http://www.keuka.edu/faculty/grn301/_discuss/0000002e.htm?tramadol-online\">tramadol
online</a>

http://www.keuka.edu/faculty/grn301/...ramadol-online

http://www.keuka.edu/faculty/grn301/_discuss/0000002e.htm?tramadol-online]tramadol
online[/url]
<a
href=\"http://www.sophiasolutions.net/feedback/_feedback/00000029.htm?cheap-cialis\">cheap
cialis</a>

http://www.sophiasolutions.net/feedb...m?cheap-cialis

http://www.sophiasolutions.net/feedback/_feedback/00000029.htm?cheap-cialis]cheap
cialis[/url]
<a
href=\"http://www.sophiasolutions.net/feedback/_feedback/00000028.htm?buy-cialis\">buy
cialis</a>

http://www.sophiasolutions.net/feedb...htm?buy-cialis

http://www.sophiasolutions.net/feedback/_feedback/00000028.htm?buy-cialis]buy
cialis[/url]
<a
href=\"http://student.darden.virginia.edu/jpOffice/ask_detail/00000642.htm?******\">******</a>

http://student.darden.virginia.edu/j...642.htm?******

http://student.darden.virginia.edu/jpOffice/ask_detail/00000642.htm?******]******[/url]
Contact_by : Email
Contact_Time : Late Afternoon 2-4pm
AZ_Health_Ins_Quote_INDEX : Yes, Contact Me!



These aren't going anywhere excpet to me. You can see in the fields that I changed the name of
that the bot left these to <Default> I changed the field names to be:
eman = name
nada = zipcode
eliame = email
comments = saywhat
Something is still selecting some of the multiple choice options. and submitting.

your form is used to send spam directly to you. This is something that you cannot avoid. It is excactly the same as if they had your email address and were sending you automated messages. Noone can stop a spammer from emailing directly. Anyway, i need some more info. Can you please give me the link to your form that has been used to send you the above email ?

Motoxxx,

i just realized, by visiting one of your sites, that you are NOT using ABVFP

I'm telling this because your form script is, i beleive, automatically spammed (by a bot). I don't beleive they take the bother to fill in manualyy your forms 100 times a day.

if this is the case, ABVFP will save you, because it performs a illegal form submission check. If it finds that the submission is made through a bot from somewhere else outside your site, it will not allow them to submit.

If you need to download the latest updated version, click here.

ABVFP will not prevent manual spamming your form, but i don't beleive that this is the case here.

Hey George,

Our form is being spammed as well (www.bwservices.ca/na_en_contact.php) and I am getting the same spam as the other fellow.

.. and I was just going to ask you if they people accually take the time to fill them in? .. or if it was a bot like you just mentioned ..

Hi Jeremy,

yes, i beleive that's a bot submission. You need ABVFP that will NOT allow bot submission. If you want, contact me. You can download the zip here

Hey,

Thanks alot, I will contact you when I have the time.

Naval, I may need you to help walk me thru this ABVFP...For some reason I think I am getting lost somewhere in the installation process.

Originally Posted by motoxxx

Naval, I may need you to help walk me thru this ABVFP...For some reason I think I am getting lost somewhere in the installation process.

Whenever you like. Just let me know.

The way i see it, put security for bots and put maximum for people to commet, like people cant send more than 3 commet in the same topic for time you chooce and stuff like those