SPAM being sent

[CanMan2004]

Hi all

A whiile ago I setup a website which has a registeration form on it, it has been fine for a while, but recently, there has been 2 times when someone is managing to hyjack the form and sending SPAM out through the form. After the first time, we added a image check, which made the user have to enter a code embeded in the image before they could continue, but this doesnt seem to have worked.

What can I do to prevent this?

Thanks

Mark

[logged_with_bugmenot]

Add a function to check if the email being submitted is a hijacking email, you cna use these functions:

/**
* Check single-line inputs:
* Returns false if text contains newline character
*/
function has_no_newlines($text)
{
  return preg_match("/(%0A|%0D|\\n+|\\r+)/i", $text) == 0;
}

/**
* Check multi-line inputs:
* Returns false if text contains newline followed by
* email-header specific string
*/
function has_no_emailheaders($text)
{
  return preg_match("/(%0A|%0D|\\n+|\\r+)(content-type:|to:|cc:|bcc:)/i", $text) == 0;
}

Then check each of the fields that should only be single lines with the first function, and check any multiline fields with the second function to make sure it contains no email headers.

[fenway]

I don't know what you mean by SPAM -- if you send an e-mail to the e-mail address provided, then there's not much you can do about it.