Forum Moderators: phranque

Message Too Old, No Replies

SPAM on contact form

         

kwngian

9:17 am on Dec 8, 2003 (gmt 0)

10+ Year Member



Hi all

I really hate SPAM!

Now these spammers are spamming my contact form with their junks. Frequently on a near daily basis. Their originating IPs are those open proxies.

Anyway to resolve this? Other than changing the filename to something else?

I am using IIS and Win2000.

Thanks.

divaone

12:48 pm on Dec 8, 2003 (gmt 0)

10+ Year Member



make sure you use unique values for your form elements. avoid using

input type=text name=email

but instead use name=my-unique-email. one-click form fillers like bookmarklets and browser add-ons rely on webmasters using basic names.

hth. never had a problem with spammers using my form-to-mail scripts.

bobbee

4:12 pm on Dec 8, 2003 (gmt 0)

10+ Year Member



I doubt changing the filename would cure the problem for long. The spam bots search for typical form wording "enter address", "contact information" etc. to find a form to 'submit'. They then search the text of that page to find form elements with predicable names.

As divaone says, changing the form element names to non-predictable values can confuse the spam bots. Unfortunately, it also confuses autofill functions which may annoy users.

The solution I'm using on all my sites is a human verification system. This presents text in an image & the user has to correctly enter the text into a text box before the contact information will display. I wrote this in PHP but you should be able to create it in any decent scripting language.

I hope this helps,

Bob

kwngian

3:08 am on Dec 9, 2003 (gmt 0)

10+ Year Member




Thanks, Divaone and Bobbee.

Will try out the suggestions.

andy_boyd

12:29 am on Dec 10, 2003 (gmt 0)

10+ Year Member



I also HATE spam! But I have one way of getting round it with a fairly high degree of success. This is what I do.

When designing a site I purposefully do not add an email anywhere, but if I really have to I encode the whole thing in ascii and display it as info at widget-online dot com. People might not instantly recognise the email address because it does't contain the "@", but the combination of that and ascii encoding works a treat.

Also, I make my contact form reachable from any page. It is clean and simple. The email address in the form is also encoded. It works well. Try it.

kwngian

3:56 am on Dec 10, 2003 (gmt 0)

10+ Year Member



>I also HATE spam!

haha, anyway thanks for the info.