View Full Version : Receiving Blank Emails

08-20-2007, 08:07 PM
Can anyone tell me why every so often I receive an email using my Contact Form with no name or email address. The subject reads Contact from Website. And in the body of email it says "Values submitted from web site form:".

"Properties" reads as follows:

To: info@forgetmenotusa.com
Subject: Contact from website
Message-Id: <E1INAcC-0007Sf-3p@voda7.vodahost.com>
Date: Mon, 20 Aug 2007 12:00:32 -0500
X-Antivirus: AVG for E-mail 7.5.484 [269.12.0/961]
Mime-Version: 1.0
Content-Type: text/plain

08-20-2007, 10:20 PM
Your contact form isn't secure enough and spam bots are using header injection to use your form to send email to other email addresses.

08-21-2007, 01:21 AM
Hm... I am not sure if that is a bot submission. If it was, you should be receiving some content in the email Probably someone clicking your form submit button just to see what it does. In my opinion.

08-21-2007, 08:08 PM
I have received a couple of those empty emails too. I get some content but never name, address, phone. COuld it be someone playing or is there a real issue with bots?


08-21-2007, 08:11 PM
Not in my opinion. If it were bots, they would have injected the email address or the subject to send spam. If there is no trace of such elements, i don't think it is a bot issue.

08-21-2007, 08:13 PM
Thanks. I'll see how many more times it happens. How do you make a contact page more secure?

08-21-2007, 11:03 PM
There are some ways. Using sessions, using a captcha, performing php validation for fields length and content. However, these are all techniques that require coding knowledge.

08-22-2007, 01:10 AM
Years back when I first started using php I would get blank emails because my forms weren't secure. As I learned more and added security the blank emails stopped. I mean I could be wrong, it might not be the same circumstances for this form, there could just be a bug in the code, but my bets with a bot using the form to send spam

08-23-2007, 03:48 PM
Thanks for all your replies. At least I know I am not the only one. I guess I need to check into making my contact form more secure.

I can always count on the BV community to respond. Thank you!