Form Security and Spam

[navaldesign]

Re: Form Being Spammed

Yes, that's the same, but the main thread is in http://www.vodahost.com/vodatalk/for...processor.html

For a real case example, have a look here

[beebrothers]

Re: Form Being Spammed

wow..thats complicated..(abvfp)

i might keep Andy's method? i don't have enough hair left to attempt the abvfp

:)

[navaldesign]

Re: Form Being Spammed

ABVFP is EASY. It requires no scripting at all, it just requires you to follow the installation procedure and then run a very friendly user interface. Practically, it consists of a form where you simply fill in your preferences. Then the script processes your form according to your preferences.

And, ofcourse you can use Andy's script (easier to install). ABVFP has addittional features, that allow more things, but it needs 15 - 20 minutes of your time to install it.

[davidundalicia]

Re: Form Being Spammed

You cannot STOP spam, you can only cut it down.....

If your code includes the check below then no more than 2 email addresses
can be used in the text area on any form:.

if (substr_count($comments, '@') > "2")
{
header("Location: comments_error.html");
exit;
}

Besides, most of the spam comes from bots or humans scouring the web
for email addresses, and if you try to send them an email they know that they have scored a hit and will keep sending auto emails to you.

I am now receiving spam from the idiots that are using the voda ping or trackback system
so now all those go to my spam box now.

[motoxxx]

Re: Form Being Spammed

Where do I place this code?

I have ben messing with AVBFP and it does seem like it is confusing. I certainly appreciate all of the work that Naval has put into it. I am going to try reading the whole install process again when I am not quite so tired.

It seems that now this idiot that is spamming my forms ahs found all of my other sites as well. I am getting approx 50 of these per day at the moment.....

I don't need ******, ******, or any other medication and I really don't understand how these jerks that send out these massive spam campaings can find enough stupid people to buy from them....

Unbelievable.

[navaldesign]

Re: Form Being Spammed

ABVFP has already all of this in it's code. And not only in the commets field, but in ALL fields. And it can be 0, or 1.

[davidundalicia]

Re: Form Being Spammed

Give ABVFP another shot when your not so tired, its well worth the effort.

If you have any probs, I am sure that Naval will sort it out.

[beebrothers]

Re: Form Being Spammed

ABVFP is EASY. It requires...15 - 20 minutes of your time to install it.

set your clock, here goes nothing..

[beebrothers]

Re: Form Being Spammed

ok. on step two, so far no problem, how am doing on time :p

[beebrothers]

Re: Form Being Spammed

stop the timer i think i got it..just need to test in seven different ways..

[beebrothers]

Re: Form Being Spammed

i didnt get the set permission to 777 on the upload folder tho, i couldnt figure that one out??

[beebrothers]

Re: Form Being Spammed

yepper the upload option doesnt work...hmm

everything else seems great..even with several varieties of errors

[beebrothers]

Re: Form Being Spammed

and also when i was doing the http://beebrothers.org/ndadmin.php in my browser i got an 404 error when i clicked general config..

everything else works fantastic..thank you for your time, drinks on me..superb

[beebrothers]

Re: Form Being Spammed

ok, thats all i can do 2 hours..not bad considering what we get...
i had to change the appearance of the pages as i went, that took some time, still need to spruce them up a tad bit..

everything works great except:

the upload thingy part
the autoresponder doesnt send and email to the form email

i am happy as a clam i hate spam..hehe

[navaldesign]

Re: Form Being Spammed

Ok, i have tested it. Your autoresponder works, i got the autoresponder mail. Maybe some problem with your email or your typing the email address. The upload probably doesn't work, because you have not set the permissions to 777. If it is anything else than 777, it will not work. Connect with FTP, right click on the "uploads" folder, and then select "permissions" (or properties). Set it to 777 and it will work. Alternative solution: delete the entire uploads folder. The script will create it correctly, by itself, in the first upload.

I also advise always, to publish a blank "index" page, or an index page with a redirect code, in the "uploads" folder. This is a necessary security measure, because if someone types www.yourdomaqin.com/uploads he can see your folder content. So, if he uploads a malicious script, he can then run it and hack your site. Alternatively, name your folder with another name, not "uploads", when you run the ndadmin.php .

As for the 404 Page not found error when you generate the configuration file, you get that because you probably have not published on your site the "ndconfirm.html" file. Do it and it will all be ok. However, it will also work even without it. It is just a confirmation page.

However, i would change some of the things in your form:

Company, address etc fields are NOT set to check for the @ symbol, so they may eventually allow spamming. Set the extensions to be -A or -B (depending on the desired field lenght) so they will not allow this.