I have a contact form using PHP

Off late i am getting spammed its like someone types in name address and then some message and gets sent to me and im like geting 10ish per day! Is their anyhow i can stop it? im thinking its computer generated rather than someone typing it up...

i am not sure what information ill need to give you guys so please feel free to tell me what i need to supply

thanks

If you find the IP address of the person/bot sending you the messages, you can always block that.

I had a simliar problem a while back, and thats how I resolved it. But there might be a better way to do it.

If you wish to use formmail script then you can find few good scripts at :

verysimple.com

Take a look at the folowling post:

http://www.webmaster-talk.com/php-fo...-top-tips.html

It covers some good php based ways to protect yourself.

Originally Posted by checkmate

I have a contact form using PHP

Off late i am getting spammed its like someone types in name address and then some message and gets sent to me and im like geting 10ish per day! Is their anyhow i can stop it? im thinking its computer generated rather than someone typing it up...

i am not sure what information ill need to give you guys so please feel free to tell me what i need to supply

thanks

You need some form of captcha to make sure a human and not a robot is submitting the form.
Checkmate I've made a little demo script for you:
http://www.inet411.com/demos/checkmate.php

You can get the code here:
http://www.inet411.com/demos/verify.txt

If that works for you let me know. If you can't figure out how to implement it, just post your code here and I'll integrate into it for you.

Regards,

Hi their

I liked the above

can you please help me add it in? I have my script below for you

thanks in advance!

<form action="Thankyou.php" method="post">
<span class="white_text"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"> Your Name :
<input type="text" name="name" />
<br />
<br />
Your E-Mail :
<input type="text" name="email" />
<br />
<br />
Message :<br />
<textarea name="message" cols="35" rows="7"></textarea>
<br />
<br />
<input name="submit" type="submit" value="Send" />
</font> </span>
</form>

Hope this helps:

PHP Code:

<?
session_start();
//----------------------------------------
//#This is the Page with form
//----------------------------------------
$number1 = rand(1,4);
$number2 = rand(1,4);
$_SESSION['answer'] = $number1 + $number2;
?>
<form action="Thankyou.php" method="post">
<span class="white_text"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"> Your Name :
<input type="text" name="name" />
<br />
<br />
Your E-Mail :
<input type="text" name="email" />
<br />
<br />
Message :<br />
<textarea name="message" cols="35" rows="7"></textarea>
<br />
<br />
Perform this simply math problem to prove you are human :<br />
<?echo"$number1 + $number2 = ";?>
<input type="text" name = "uanswer">
<br />
<br />
<input name="submit" type="submit" value="Send" />
</font> </span>
</form> 
 
 
//Above is the contact page, below is the thankyou page
 
<?
session_start();
//----------------------------------------
//#This is the Thank you page
//----------------------------------------
if (($_POST['uanswer']) && ($_POST['uanswer'] != $_SESSION['answer'])) {
echo ("<p align=center>Wrong answer Please try again!</p>");
} else {
//put whatever you want here after a form is submitted
}
?>

One way to stop it if its a bog is to put a hidden input that remains empty. You then use php and check to see if that field is empty and if it is then its a person and not a bot. A bot would put something in it (depending on the name of it).

On our contact form, I really did not want to sue captcha, as research shows some people are put off by it. Each field is checked for stuff like bcc: cc: to: < >, commas in the senders email field. In addition, there is a hidden (supposed name) field which if a spambot enters anything, the email is rejected. Since adding these features, we have had no spam at all, and I also believe it is impossible for the form to be hijacked to send to anyone else.

Best wishes

Tony

I don't think people are put off by CAPTCHAs - though like all good changes, people might take a while to get used to them. I'd be interested to see the research though.