PDA

View Full Version : Receiving Blank Emails



jamnltd
08-20-2007, 08:07 PM
Can anyone tell me why every so often I receive an email using my Contact Form with no name or email address. The subject reads Contact from Website. And in the body of email it says "Values submitted from web site form:".

"Properties" reads as follows:

To: info@forgetmenotusa.com
Subject: Contact from website
From:
Message-Id: <E1INAcC-0007Sf-3p@voda7.vodahost.com>
Date: Mon, 20 Aug 2007 12:00:32 -0500
X-Antivirus: AVG for E-mail 7.5.484 [269.12.0/961]
Mime-Version: 1.0
Content-Type: text/plain

Watdaflip
08-20-2007, 10:20 PM
Your contact form isn't secure enough and spam bots are using header injection to use your form to send email to other email addresses.

navaldesign
08-21-2007, 01:21 AM
Hm... I am not sure if that is a bot submission. If it was, you should be receiving some content in the email Probably someone clicking your form submit button just to see what it does. In my opinion.

bmorrow
08-21-2007, 08:08 PM
I have received a couple of those empty emails too. I get some content but never name, address, phone. COuld it be someone playing or is there a real issue with bots?

Bob
www.hamiltonhomereview.com

navaldesign
08-21-2007, 08:11 PM
Not in my opinion. If it were bots, they would have injected the email address or the subject to send spam. If there is no trace of such elements, i don't think it is a bot issue.

bmorrow
08-21-2007, 08:13 PM
Thanks. I'll see how many more times it happens. How do you make a contact page more secure?

navaldesign
08-21-2007, 11:03 PM
There are some ways. Using sessions, using a captcha, performing php validation for fields length and content. However, these are all techniques that require coding knowledge.

Watdaflip
08-22-2007, 01:10 AM
Years back when I first started using php I would get blank emails because my forms weren't secure. As I learned more and added security the blank emails stopped. I mean I could be wrong, it might not be the same circumstances for this form, there could just be a bug in the code, but my bets with a bot using the form to send spam

jamnltd
08-23-2007, 03:48 PM
Thanks for all your replies. At least I know I am not the only one. I guess I need to check into making my contact form more secure.

I can always count on the BV community to respond. Thank you!

Andrea