_house Posted December 22, 2008 Share Posted December 22, 2008 hi, first off: kudos to this site for using such an easy registration process... my problem: i am using hiq formmail ( http://php.resourceindex.com/detail/04460.html ) and am experiencing heavy spam problems. since blogging their ip in cpanel does not solve anything (they simply use another proxy), i was thinking of disallowing html tags in the form mailer. the spammers are the only ones who use them, after all... only thing is, i have absolutely no idea how to do that. could somebody please help me? cheers, house oh and happy holidays/christmas Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/ Share on other sites More sharing options...
ILMV Posted December 22, 2008 Share Posted December 22, 2008 First, have you got a CAPTCHA system in place? Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721295 Share on other sites More sharing options...
_house Posted December 22, 2008 Author Share Posted December 22, 2008 First, have you got a CAPTCHA system in place? no, i do not, since hiq doesn't offer this option... Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721348 Share on other sites More sharing options...
lokie538 Posted December 22, 2008 Share Posted December 22, 2008 couldnt you change the script too allow a captcha Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721353 Share on other sites More sharing options...
lokie538 Posted December 22, 2008 Share Posted December 22, 2008 Try looking at this it might help: http://au2.php.net/htmlentities also http://daniel0.net/phpfreaks_tutorials/php_security/php_security.pdf Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721355 Share on other sites More sharing options...
_house Posted December 22, 2008 Author Share Posted December 22, 2008 thanks for the answers. i had a look at http://www.boutell.com/newfaq/creating/captcha.html . the thing is, though, that it's not possible to add php code into my site's template. i'd have to directly modify the contact script and i have no idea how to do that... Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721357 Share on other sites More sharing options...
ILMV Posted December 22, 2008 Share Posted December 22, 2008 CAPTCHA, or a variation of such a security feature is by far (apart from hiring the mafia to protect your website) the easiest way to secure your forms. I had a comment form that was being spammed hundreds of times with no CAPTCHA, I at first simply had a piece of text saying insert the number: 2269 in the box below and all my spam stopped! Even though the number never changed, and the number was readable to a bot. With that in mind, if hiq (? whatever that is) doesn't implement a captcha system, do it yourself, use someone elses (google recaptcha) or change to a better service. Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721358 Share on other sites More sharing options...
_house Posted December 22, 2008 Author Share Posted December 22, 2008 CAPTCHA, or a variation of such a security feature is by far (apart from hiring the mafia to protect your website) the easiest way to secure your forms. I had a comment form that was being spammed hundreds of times with no CAPTCHA, I at first simply had a piece of text saying insert the number: 2269 in the box below and all my spam stopped! Even though the number never changed, and the number was readable to a bot. With that in mind, if hiq (? whatever that is) doesn't implement a captcha system, do it yourself, use someone elses (google recaptcha) or change to a better service. already tried that, but this form is afaik the best if it comes to file attachments. and this feature i need... how would one add your "pseudo captcha" into the contact form? Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721360 Share on other sites More sharing options...
ILMV Posted December 22, 2008 Share Posted December 22, 2008 <p>Type the following number into the text box: 2485<br /> <input type='text' name='captcha' /></p> Then you will need some PHP (or maybe some javascript)... if($_POST['captcha']==2485) { echo("Horray!"); } Happy Xmas! ILMV Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721364 Share on other sites More sharing options...
lokie538 Posted December 22, 2008 Share Posted December 22, 2008 Try http://recaptcha.net/whyrecaptcha.html it gives you instructions on how to install it, except you need to know where and what files to install it into Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721365 Share on other sites More sharing options...
_house Posted December 22, 2008 Author Share Posted December 22, 2008 thanks to everyone Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721367 Share on other sites More sharing options...
lokie538 Posted December 22, 2008 Share Posted December 22, 2008 If that is all you need to know, remember to set the thread to solved Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721373 Share on other sites More sharing options...
_house Posted December 22, 2008 Author Share Posted December 22, 2008 btw, just in case anyone reading this in the future uses hiq formmail as well: insert // Simple spam filter if($_POST['captcha']!=foo) { $errorlist .= "<BR>Apparently you aren't human...<BR>"; } somewhere in HiQFM.php. "foo" being the number you've previously defined in your form... Link to comment https://forums.phpfreaks.com/topic/138006-solved-disallow-html-tags-in-form-mailer/#findComment-721438 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.