Can anyone tell me why every so often I receive an email using my Contact Form with no name or email address. The subject reads Contact from Website. And in the body of email it says "Values submitted from web site form:".

"Properties" reads as follows:

To: info@forgetmenotusa.com
Subject: Contact from website
From:
Message-Id: <E1INAcC-0007Sf-3p@voda7.vodahost.com>
Date: Mon, 20 Aug 2007 12:00:32 -0500
X-Antivirus: AVG for E-mail 7.5.484 [269.12.0/961]
Mime-Version: 1.0
Content-Type: text/plain

__________________
http://forgetmenotusa.com
info@forgetmenotusa.com

Your contact form isn't secure enough and spam bots are using header injection to use your form to send email to other email addresses.

__________________

Register/Login Script
Do you use a Password Protected Directory? Need a way to allow users to make their own account, try my .htaccess Login Script

Hm... I am not sure if that is a bot submission. If it was, you should be receiving some content in the email Probably someone clicking your form submit button just to see what it does. In my opinion.

__________________
Navaldesign
Logger Lite: Low Cost, Customizable, multifeatured Login script
Instant Download Cart: a Powerfull, Customized, in site, DB driven, e-products Cart
DBTechnosystems.com Forms, Databases, Shopping Carts, Instant Download Carts, Loggin Systems and more....
Advanced BlueVoda Form Processor : No coding form processor! Just install and use! Now with built in CAPTCHA!

I have received a couple of those empty emails too. I get some content but never name, address, phone. COuld it be someone playing or is there a real issue with bots?

Bob
www.hamiltonhomereview.com

Not in my opinion. If it were bots, they would have injected the email address or the subject to send spam. If there is no trace of such elements, i don't think it is a bot issue.

__________________
Navaldesign
Logger Lite: Low Cost, Customizable, multifeatured Login script
Instant Download Cart: a Powerfull, Customized, in site, DB driven, e-products Cart
DBTechnosystems.com Forms, Databases, Shopping Carts, Instant Download Carts, Loggin Systems and more....
Advanced BlueVoda Form Processor : No coding form processor! Just install and use! Now with built in CAPTCHA!

Thanks. I'll see how many more times it happens. How do you make a contact page more secure?

There are some ways. Using sessions, using a captcha, performing php validation for fields length and content. However, these are all techniques that require coding knowledge.

__________________
Navaldesign
Logger Lite: Low Cost, Customizable, multifeatured Login script
Instant Download Cart: a Powerfull, Customized, in site, DB driven, e-products Cart
DBTechnosystems.com Forms, Databases, Shopping Carts, Instant Download Carts, Loggin Systems and more....
Advanced BlueVoda Form Processor : No coding form processor! Just install and use! Now with built in CAPTCHA!

Years back when I first started using php I would get blank emails because my forms weren't secure. As I learned more and added security the blank emails stopped. I mean I could be wrong, it might not be the same circumstances for this form, there could just be a bug in the code, but my bets with a bot using the form to send spam

__________________

Register/Login Script
Do you use a Password Protected Directory? Need a way to allow users to make their own account, try my .htaccess Login Script

Thanks for all your replies. At least I know I am not the only one. I guess I need to check into making my contact form more secure.

I can always count on the BV community to respond. Thank you!

Andrea

__________________
http://forgetmenotusa.com
info@forgetmenotusa.com