Form being spammed

Unwanted porn spam on child charity websites

[Paul Hildreth]

I run some small websites for charities and commercial and have been receiving porn spam on the Contact Forms. An example is as follows:

your_name: Gartman6
phone: vlHIxfbKolkozk
through: None selected
Form then contains website urls and porn text.

I know little of the mechanics of forms, I'm no programmer, and I placed a check box into the form to fool the spammer, but it did not work.

I would appreciate advice on using a graphic validation box like at this site [search.msn.co.uk...] where the user has to input a seen code, or some other device to get the spammer to stop using the sites.

Thanks

Paul Hildreth

[dreamcatcher]

Hi Paul, welcome to WebmasterWorld. :)

You need some form of captcha. Try a google search for 'PHP Captcha' and you should find plenty of free code snippets. You should also protect your e-mail headers against form injection by stripping potentially harmful tags.

This link may be useful to you:
[securephpwiki.com...]

Also, Google for 'E-Mail Header Injections'.

dc