[SOLVED] Disallow HTML Tags In Form Mailer

[_house]

hi,

 

first off: kudos to this site for using such an easy registration process...

 

my problem:

i am using hiq formmail ( http://php.resourceindex.com/detail/04460.html ) and am experiencing heavy spam problems.

since blogging their ip in cpanel does not solve anything (they simply use another proxy), i was thinking of disallowing html tags in the form mailer.

the spammers are the only ones who use them, after all...

 

only thing is, i have absolutely no idea how to do that.

could somebody please help me?

 

cheers,

 

house

 

 

oh and happy holidays/christmas

[ILMV]

First, have you got a CAPTCHA system in place?

 

 

[_house]

First, have you got a CAPTCHA system in place?

 

no, i do not, since hiq doesn't offer this option...

[lokie538]

couldnt you change the script too allow a captcha

[lokie538]

Try looking at this it might help: http://au2.php.net/htmlentities

 

also http://daniel0.net/phpfreaks_tutorials/php_security/php_security.pdf

[_house]

thanks for the answers.

i had a look at http://www.boutell.com/newfaq/creating/captcha.html . the thing is, though, that it's not possible to add php code into my site's template.

 

i'd have to directly modify the contact script and i have no idea how to do that...

[ILMV]

CAPTCHA, or a variation of such a security feature is by far (apart from hiring the mafia to protect your website) the easiest way to secure your forms.

 

I had a comment form that was being spammed hundreds of times with no CAPTCHA, I at first simply had a piece of text saying insert the number: 2269 in the box below and all my spam stopped! Even though the number never changed, and the number was readable to a bot.

 

With that in mind, if hiq (? whatever that is) doesn't implement a captcha system, do it yourself, use someone elses (google recaptcha) or change to a better service.

 

 

[_house]

CAPTCHA, or a variation of such a security feature is by far (apart from hiring the mafia to protect your website) the easiest way to secure your forms.

 

I had a comment form that was being spammed hundreds of times with no CAPTCHA, I at first simply had a piece of text saying insert the number: 2269 in the box below and all my spam stopped! Even though the number never changed, and the number was readable to a bot.

 

With that in mind, if hiq (? whatever that is) doesn't implement a captcha system, do it yourself, use someone elses (google recaptcha) or change to a better service.

 

already tried that, but this form is afaik the best if it comes to file attachments. and this feature i need...

 

how would one add your "pseudo captcha" into the contact form?

[ILMV]

<p>Type the following number into the text box: 2485<br />
<input type='text' name='captcha' /></p>

 

Then you will need some PHP (or maybe some javascript)...

 

if($_POST['captcha']==2485) {
    echo("Horray!");
}

 

Happy Xmas!

ILMV

[lokie538]

Try http://recaptcha.net/whyrecaptcha.html it gives you instructions on how to install it, except you need to know where and what files to install it into

[_house]

thanks to everyone 

[lokie538]

If that is all you need to know, remember to set the thread to solved

[_house]

btw, just in case anyone reading this in the future uses hiq formmail as well:

 

insert

// Simple spam filter
if($_POST['captcha']!=foo) {
    $errorlist .= "<BR>Apparently you aren't human...<BR>";
}

 

somewhere in HiQFM.php.

"foo" being the number you've previously defined in your form...