[urgent] Spam Attack! Help!

Help, my host company is threatening to shut me down. I have a "join newsletter" form (email form) on my homepage and now am getting attacked by spammers. I keep getting emails like these:

<b>note:</b>my.servercompany.com is just changed to protect the innocent.

This is in the "From" header. I am getting tons of these.

"andContent-Type: multipart/alternative@my.servercompany.com;
boundary=0b23dd8fd6c7fc60676472c34c90c238MIME-Version: 1.0Subject: from
the orth ea. erhaps thoubcc: charieses329@aol.comThis is a multi-part
message in MIME format.--0b23dd8fd6c7fc60676472c34c90c238Content-Type:
text/plain; charset=\"us-ascii\"MIME-Version:
1.0Content-Transfer-Encoding: 7bitdoin an he wants thim to see what
good he s doin . e gets fifty per cint iv his wish niver more. man
keeps his front--0b23dd8fd6c7fc60676472c34c90c238--."

<b>here is my code for the page that contains the email form</b>:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<?

include ("includes/css.php");
include ("includes/db.php");
mysql_select_db('fake_emaildb', $connection) or die(mysql_error());

?>
<TITLE>Santa Cruz Bicycles</TITLE>
<META NAME="Generator" CONTENT="EditPlus">
<META NAME="Author" CONTENT="">
<META NAME="Keywords" CONTENT="">
<META NAME="Description" CONTENT="">

<SCRIPT LANGUAGE="JavaScript">
<!-- Begin
function placeFocus() {
if (document.forms.length > 0) {
var field = document.forms[0];
for (i = 0; i < field.length; i++) {
if ((field.elements[i].type == "text") ŚŚ (field.elements[i].type == "textarea") ŚŚ (field.elements[i].type.toString().charAt(0) == "s")) {
document.forms[0].elements[i].focus();
break;
}
}
}
}

<?
if($SUBSCRIBE=='1'){

// first check to see if they are already part of the email list;
$sql_email_check = mysql_query("SELECT Email FROM CUSTOMERS WHERE Email = '$email'");
$email_check = mysql_num_rows($sql_email_check);
if($email_check > 0){

echo "<font class=MedGrey>You are already part of our Email Newsletter. Hold tight, we will be sending out another edition of our newsletter soon!</font> <BR>";

exit;
}

// If they aren't already part of the list, add them

else {
mysql_query( "INSERT INTO CUSTOMERS (Email,Subscribe) VALUES('$email','$SUBSCRIBE')");
$sql_email_check2 = mysql_query("SELECT Email FROM CUSTOMERS WHERE Email = '$email'");
$email_check2 = mysql_num_rows($sql_email_check2);
if($email_check2 > 0){
echo "<font class=MedGrey>Welcome to our Email list! <br>If you would like to see the last newsletter <a class=BigRed href=mail/1205.html target=_blank> click here</a></font>";
exit;
}else {
echo "<font class=BigRed>There was some kind of problem adding you to our newsletter. </font>";

}
}

// End Subscribe sequence
}

if($sendmail=='1'){

$email = $_POST['email'];
$email = preg_replace( "/[\r\n]/", '', $email );
$message = "<font color=grey face=arial size=1>Thank you for signing up for the Newsletter!<br><BR><b><a href=http://www.[myserver].com/index.php?SUBSCRIBE=1&email=$email>Last step, click this link to activate your subscription to our newsletter.</a></b><P><P><br>If you ever wish to unsubscribe: <a href=http://www.[myserver].com/mail/unsubscribe.php?Email=$email>Click Here</a> and enter your email address.</font>";
echo" <font class=MedGrey>Soon you will recieve an email with instructions on how to confirm your subscription to our newsletter.<br> Just follow the simple steps listed in the email and you're done!</font><br>";
$subject = "Newsletter Confirmation";
$recipient = "[myemail]@[mywebsite].com";

$headers .= "$email";
$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
$headers .= "From: $email";

if( preg_match( "/@/", $email ) )
mail( $recipient, $subject, $message, $headers );

if($Subscribe=="1"){
$sql_email_check = mysql_query("SELECT Email FROM CUSTOMERS WHERE Email = '$email'");
$email_check = mysql_num_rows($sql_email_check);

/* Email body content*/
if($email_check > 0){

echo "<font class=MedGrey>Hey, don't worry, you are still on our email list!</font> <BR>";

}
}
}else{
?>
<form action="<?echo $PHP_SELF;?>?sendmail=1" method="post" onSubmit="return submitForms();">
<table cellpadding="0" cellspacing="0" border="0">
<tr>
<td nowrap align="right" valign="top"><img src="graphics/newsletter.gif" border="0"></td>
<td align="right" valign="top"><input type="text" name="email" style="font-family: arial;color: #999999; border-top: 1pt solid #666666; border-bottom: 1pt solid #666666; border-left: 1pt solid #666666; border-right: 1pt solid #666666; padding-left: 4px; padding-right: 4px; background-color: #333333;"></td>
<td align="right" valign="top"><input type="hidden" name="Subscribe" value="1">  <input type="image" src="graphics/signup.gif" value="send >>"></td>

</tr>
</table>
</form>
<?}?>

</td>
</tr>
</table>

</center>
</body>
</html>

[urgent] Spam Attack! Help!

Email Spam bots attacking!

astronaut

jatar_k

phparion

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week