Re: [PHP] Spam using email on website

2006-11-10 Thread Nisse Engström
On Tue, 7 Nov 2006 13:14:54 -0600 (CST), Richard Lynch wrote: The Bad Guys are probably cramming your $subject and $from data with an ENTIRE eamil, so your mail() function is, in effect, and Open Relay. (That's very very very bad.) Example: Normal Input $subject = Hi!; Bad Guy Input

Re: [PHP] Spam using email on website

2006-11-08 Thread clive
Richard Lynch wrote: On Tue, November 7, 2006 12:42 am, Pieter du Toit wrote: What can i do? Disable the mail() function bit in your code that processes the FORM submission. you could also use a cool class I once found, google/search for phpmailer, it has a nice bit of code that allows

Re: [PHP] Spam using email on website

2006-11-08 Thread Richard Lynch
On Tue, November 7, 2006 4:22 pm, Bruce Cowin wrote: Yikes, so besides disabling the mail() function, how do you check for all that? if (strstr($subject, \n) || strstr($subject, \r)) die(Spammer); Same thing again for $from or any other variable going into your headers. In the body, there's

Re: [PHP] Spam using email on website

2006-11-08 Thread Richard Lynch
On Wed, November 8, 2006 7:06 am, clive wrote: Richard Lynch wrote: On Tue, November 7, 2006 12:42 am, Pieter du Toit wrote: What can i do? Disable the mail() function bit in your code that processes the FORM submission. you could also use a cool class I once found, google/search for

Re: [PHP] Spam using email on website

2006-11-07 Thread clive
Pieter du Toit wrote: Hi guys I have a website that is being crawled or whatever and i have a submission form for an event. I keep on getting random mail from this form. I have even disabled the submit button on the form, but keep on getting it. What can i do? you could use a CAPTCHA

RE: [PHP] Spam using email on website

2006-11-07 Thread Brad Fuller
-Original Message- From: Pieter du Toit [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 1:43 AM To: php-general@lists.php.net Subject: [PHP] Spam using email on website Hi guys I have a website that is being crawled or whatever and i have a submission form for an

RE: [PHP] Spam using email on website

2006-11-07 Thread Brad Fuller
-Original Message- From: Pieter du Toit [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 1:43 AM To: php-general@lists.php.net Subject: [PHP] Spam using email on website Hi guys I have a website that is being crawled or whatever and i have a submission form for an

Re: [PHP] Spam using email on website

2006-11-07 Thread Richard Lynch
On Tue, November 7, 2006 12:42 am, Pieter du Toit wrote: I have a website that is being crawled or whatever and i have a submission form for an event. I keep on getting random mail from this form. I have even disabled the submit button on the form, but keep on getting it. What can i do?

Re: [PHP] Spam using email on website

2006-11-07 Thread Bruce Cowin
Yikes, so besides disabling the mail() function, how do you check for all that? Regards, Bruce Richard Lynch [EMAIL PROTECTED] 8/11/2006 8:14 a.m. On Tue, November 7, 2006 12:42 am, Pieter du Toit wrote: I have a website that is being crawled or whatever and i have a submission form for an

Re: [PHP] Spam using email on website

2006-11-06 Thread Robert Cummings
On Tue, 2006-11-07 at 08:42 +0200, Pieter du Toit wrote: Hi guys I have a website that is being crawled or whatever and i have a submission form for an event. I keep on getting random mail from this form. I have even disabled the submit button on the form, but keep on getting it.

Re: [PHP] Spam using email on website

2006-11-06 Thread Robert Cummings
On Tue, 2006-11-07 at 02:20 -0500, Robert Cummings wrote: On Tue, 2006-11-07 at 08:42 +0200, Pieter du Toit wrote: Hi guys I have a website that is being crawled or whatever and i have a submission form for an event. I keep on getting random mail from this form. I have even