nms formmail abuse

Forum Moderators: coopster & phranque

Message Too Old, No Replies

nms formmail abuse

spam submissions

proboscis

12:15 am on Dec 27, 2006 (gmt 0)

Hello,

I am using nms formmail and I am getting some weird spam submissions. The subject line is "WWW Form Submission" which is the default instead of the subject line that I have specified, the from email address is the nobody account at my hosting company, and I use maxlength in my input fields but this is being overridden and really long lists of urls are being submitted. Below is what is at the top of the submission, then this is followed by the urls.

keywords: subject=submission&redirect=http://www.example.com/thanks.shtml&
required=email,address,description&env_report=REMOTE_HOST,REMOTE_ADDR
&address=Porn show for you now:

How are they doing this and how do I stop it?

Thanks :)

IanKelley

2:20 am on Dec 29, 2006 (gmt 0)

The form submission is being sent directly to the target script, most likely using a robot, which means that any limits present in your HTML are irrelevant.

I would recommend adding a CAPTCHA to the submission system.

proboscis

11:13 pm on Dec 29, 2006 (gmt 0)

I see. Can anyone reccommend a captcha that's easy to add to nms formmail?

Thank you.

wruppert

3:24 pm on Jan 3, 2007 (gmt 0)

I can't find an easy to use captch myself, at least for the hosting environment I am in. I followed a tip I saw somewhere and wrote a script to change the names of the fields to random values. I have it run each day. Works great - 99% less spam.