FORMS ON WEBSITES

[jools]

Hi,

I wonder if anyone can help me. I have recently uploaded an enquiry form to my website (www.secretarialservices4u.co.uk) but this morning I have received 8 emails with bogus addresses in such as:

Name: tlvgsr@secretarialservices4u.co.uk
Company: tlvgsr@secretarialservices4u.co.uk
Email: tlvgsr@secretarialservices4u.co.uk
Telephone: tlvgsr@secretarialservices4u.co.uk
Comments: tlvgsr@secretarialservices4u.co.uk

Other than deleting this form completely, is there anything I can do to stop this happening because I don't want hundreds of bogus emails in my in box.

Thank you in advance.

Julia

[Stephen]

Well, you could run some checks on the data before processing it (which you should do anyway to protect yourself).

For example, limiting the maximum length of some of the fields would be helpful, as some people try to hack these forms with a method that requires them to enter quite a lot of text.

You could also ensure there aren't certain characters or sequences of characters, such as ; or Content-Type or bcc:

You could also ensure there isn't the string @secretarialservices4u.co.uk

How you actually do any of this would depend on how you have setup the form. It shouldn't be too difficult though - PM me if you'd like and I can help further.

[MichaelG]

If thats what you got from the form then its someone maybe testing the form.

If you put a form on your website its because you want people to complete it - there is nothing I can think of to stop people posting rubbish.

[Ozzy]

The form is being targetted by a spamming robot trying to exploit/hack your form to gain access to the server hosting your website.
I get a lot of this also, and the fact you are getting those emails and your website is still around would suggest you are OK.

Annoying, but there are a lot of dodgey people hiding behind the internet I'm afraid.

[jools]

Hi everyone,

Thank you for your replies.

I am going to run a few checks on the website and then see what happens.

Regards
Julia