Forums

ASP

This topic is locked

HELP! - form spamming

Posted 01 Feb 2007 23:50:58
1
has voted
01 Feb 2007 23:50:58 Dan Berdusco posted:
I hope someone can give me some suggestions so that i can resolve my problem.

I have several websites that have a "feedback form" so that a user can fill it out and the information gets emailed to an email address. I am using CDONTS to perform this. However, lately, spammers have been taking advantage of this and somehow using my forms to send spam email.

Has anyone had this happen to them before - if so, do you have any information has to how I can stop this.

I HATE SPAMMERS!!!

Replies

Replied 02 Feb 2007 08:44:37
02 Feb 2007 08:44:37 Dave Clarke replied:
you could use a captcha, i use this one

www.webwizguide.info/asp/sample_scripts/web_wiz_CAPTCHA.asp

DW8.02|ASP|VBScript|IIS5.1|Access|WinXPPro & WinXPHome.
www.reunite.co.uk
Replied 02 Feb 2007 17:40:13
02 Feb 2007 17:40:13 Alan C replied:
I had a similar problem so I wrote a whole load of input verification, like checking fields were no longer than the expected length, removing everything except [a-z, A-Z, 0-9] plus certain other characters, looking for other things too, it got messy and was very time consuming. It stopped the spam though. In future it will be captcha probably with an image.

A very simple captcha that is effective is a question like "What animal goes mooo?" then radio buttons like cat, dog, cow, very quick to implement and it works.
Replied 03 Feb 2007 18:26:40
03 Feb 2007 18:26:40 Dan Berdusco replied:
Thanks for the help. I will implement these on all forms in the future.

One more thing that I added that seemed to stop the spam (at least for now) was an http referrer check. I added this IF statement around the email script to ensure that the referring page was MY FORM page.

<pre id=code><font face=courier size=2 id=code> &lt;% if Request.ServerVariables("HTTP_REFERER" = "domain.com/contact/index.htm" OR Request.ServerVariables("HTTP_REFERER" = "www.domain.com/contact/index.htm" then %&gt;

Email script Here

&lt;% End If %&gt;
</font id=code></pre id=code>

Did i mention that I HATE SPAMMERS?
Replied 29 May 2007 18:44:32
29 May 2007 18:44:32 Jean Rabold replied:
We followed Trevor's suggestion about the session variable and it has worked well.
Replied 02 Jun 2007 02:45:31
02 Jun 2007 02:45:31 Wim Conix replied:
Hello,

Having the same problem with my user's guestbooks.
Since I don't want to bore them with captcha, I simply changed the filename of the formpage.
Filename something unusual (not guestbook, messages, contact,...).
So far, spam seems to have stopped...

Kind greetings, hope we all get rid of these f**ckers !
Wim

Wim Conix
www.image-belle.com

Reply to this topic