Sending mail with CDONTS

How to prevent hijacking by spammers?

[richlowe]

Thinking about using ASP with CDONTS to create forms on my website to send email. How do you prevent a spammer from (as with formmail) using the form to send a bizzillion emails using the form? Is this built in or is some checking needed. All of the scripts that I've looked at just call the routine and don't check anything - that seems, on the surface, very insecure. Does the routine do some checking to ensure it is not called over and over and over by an end-user?

Richard Lowe

[duckhunter]

Just redirect to your homepage if that is the first page hit in a Session for one.

[Night_Hawk]

duckhunter,

Can you elaborate a bit more please.

They can get to the page with mail form from any other page, i do not understand the session one. Thanks.

[duckhunter]

I keep a session variable called "HOPS" that tells me at how many pages (clicks) there have been.

In the global.asa I initialize it in the Session_Start event:

Session("HOPS") = 0

Then I have a standard include file that has mostly common functions, etc. that is included in every page on my site. At the top of this included file I have:

Session("HOPS") = Session("HOPS") + 1

Now, at the top of your mail form put this code:

If Session("HOPS") = 0 Then
Response.redirect("MyHomePage")
end if

[Night_Hawk]

Thanks for sharing duckhunter.

AJ