XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. General XOOPS.org forums / 
  3. XOOPS.org Members Lounge 
  4.  / Getting Spammed through contactus module LOL!!!
Register
1
talunceford
Getting Spammed through contactus module LOL!!!

Now let me tell you, spammers are resorting to any means possible. I got this email this morning from MY web site. It seems like they used the contactus module to send a spammail to my webmaster account. JEESH!!
le="color: #000000"><?php phentermine submitted the following Information: Email buy@my.phentermine.com URL http://www.order-phentermine-now.com ICQ phentermine Company phentermine Location phentermine Comments Hi! Nice site =) If you are interested in ordering pharmacy online here are some links for U: <a href=http://www.cheap-phentermine-here.com>http://www.cheap-phentermine-here.com</a> <a href=http://www.adipex-online-here.com>http://www.adipex-online-here.com</a> <a href=http://www.buy-phentermine-online-here.com>http://www.buy-phentermine-online-here.com</a> <a href=http://www.order-phentermine-now.com>http://www.order-phentermine-now.com</a> <a href=http://www.online-soma-here.com>http://www.online-soma-here.com</a> <a href=http://www.buy-soma-here.com>http://www.buy-soma-here.com</a> <a href=http://www.cheap-fioricet-here.com>http://www.cheap-fioricet-here.com</a> <a href=http://www.buy-fioricet-here.com>http://www.buy-fioricet-here.com</a> <a href=http://www.order-fioricet-now.com>http://www.order-fioricet-now.com</a> <a href=http://www.fioricet-online-here.com>http://www.fioricet-online-here.com</a> <a href=http://www.cheap-adipex-here.com>http://www.cheap-adipex-here.com</a> <a href=http://www.order-adipex-now.com>http://www.order-adipex-now.com</a> <a href=http://www.phentermineonline-1.com>http://www.phentermineonline-1.com</a> <a href=http://www.cheapphentermine-1.com>http://www.cheapphentermine-1.com</a> <a href=http://www.buyphentermine-1.com>http://www.buyphentermine-1.com</a> Good luck! Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)


Needless to say, that IP addy, is going to get banned!!

We need to think of a way to prevent this. That is if there is a way.
2
Burnzy
Re: Getting Spammed through contactus module LOL!!!

  • 2005/1/24 15:26

  • Burnzy

  • Just popping in

  • Posts: 75

  • Since: 2005/1/23


there is no way to prevent it. That really isnt a spam mail, it is junk mail. Well if ur site is popular it will happen. The only way to do anything about it is add an ip send in the form going to the email.

I created a contact us form and it sent the ip in my email.

Here is what the contact form looks like:
<html> <head> <title>Email Form </title> </head> <body> <form name="frm" method="post" action="sendeail.php" onSubmit="return validate(frm)"> <!-- DO NOT change ANY of the php sections --> <?php $ipi = getenv("REMOTE_ADDR"); $httprefi = getenv ("HTTP_REFERER"); $httpagenti = getenv ("HTTP_USER_AGENT"); ?>  <input type="hidden" name="ip" value="<?php echo $ipi ?>"> <input type="hidden" name="httpref" value="<?php echo $httprefi ?>"> <input type="hidden" name="httpagent" value="<?php echo $httpagenti ?>"> <font size="2"><b> Your Name:* <br> <input type="text" name="visitor" size="35"> <br> Your Email:*<br> <input type="text" name="visitormail" size="35"> <br /> <br /> Copy Sender ? No<input checked="checked" name="ccopy" type="radio" value="ccno" /> Yes<input name="ccopy" type="radio" value="ccyes" /> <br /> <br> Subject:*<br> <select name="attn" size="1"> <option value=" General Support ">General Support <option value=" Ordering Support ">Ordering Support <option value=" Technical Support ">Technical Support <option value=" Templates Support ">Templates Support <option value=" Templates Support ">Application <option value=" Webmaster ">Webmaster </select> <br><br> Mail Message:* <br> <textarea name="notes" rows="4" cols="40"></textarea> Required* <br> <input type="submit" value="Send Mail"> <SCRIPT LANGUAGE="JavaScript"> <!-- function validate(frm) { if (frm.visitor.value.length == 0) { alert("Please enter your name"); frm.visitor.focus(); return false; } if (frm.visitormail.value.length == 0) { alert("Please enter an e-mail address"); frm.visitormail.focus(); return false; } if (frm.visitormail.value.indexOf("@") == -1) { alert("Please enter a valid e-mail address"); frm.visitormail.focus(); return false; } if (frm.visitormail.value.indexOf(".") == -1) { alert("Please enter a valid e-mail address"); frm.visitormail.focus(); return false; } if (frm.notes.value.length == 0) { alert("Please enter your message"); frm.notes.focus(); return false; } } //--> </SCRIPT> </form> </font></b> </body> </html>


And here is the sendeail:
<html> <head> <title>Sendemail Script</title> </head> <body> <!-- You must enter YOUR email address ($myemail shown below). Then you should check (or modify) the link for the 'next page' (at the bottom) --> <?php $myemail = "burnzy@burnsdesign.org"; $badinput = "<h2>Feedback was NOT submitted</h2>n"; if(!$visitormail == "" && (!strstr($visitormail,"@") || !strstr($visitormail,"."))) { echo "<h2>Use Back - Enter valid e-mail</h2>n"; echo $badinput; } if(empty($visitor) || empty($visitormail) || empty($notes )) { echo "<h2>Use Back - fill in all fields</h2>n"; echo $badinput; } $todayis = date("l, F j, Y, g:i a") ; $attn = $attn . "(" . $ccopy . ")" ; $subject = $attn; $notes = stripcslashes($notes); $message = " $todayis [EST] n Subject: $attn n Message: $notes n From: $visitor ($visitormail)n IP: $ip n Browser Info: $httpagent n "; $from = "From: $visitormailrn"; if ($myemail != "") mail($myemail, $subject, $message, $from); if (($ccopy == "ccyes") && ($visitormail != "")) mail($visitormail, $subject, $message, $from); ?>  <b><p align="center"> Date: <?php echo $todayis ?> <br> Thank You : <?php echo $visitor ?> ( <?php echo $visitormail ?> ) <br> Subject: <?php echo $attn ?> <br> Message: <?php echo $notes ?> <br> <?php echo $ip ?> <br><br> <a href="contact2.php"> Back to Contact Form </a> </body> </html>
3
talunceford
Re: Getting Spammed through contactus module LOL!!!

Thanks for the reply, Ill add that. At least I can ban the ip addy.
4
limecity
Re: Getting Spammed through contactus module LOL!!!

  • 2005/1/24 15:49

  • limecity

  • Friend of XOOPS

  • Posts: 1602

  • Since: 2003/7/6 0


I got the same problem last time.
some visitors abuse the contact form. sending crap to my email.

I used the ip technique but didn't work.
so i end up closing the module for members only. after 1-2 weeks, i open the contact form to non members and there wasn't anymore abuse.

I same got the same pharmacy and medicine spam mail. I did submit the site to anti-spam report site. Hopefully, they will get blacklisted and somehow get close down.
5
stuie200
Re: Getting Spammed through contactus module LOL!!!

  • 2005/1/24 15:59

  • stuie200

  • Friend of XOOPS

  • Posts: 161

  • Since: 2004/1/4 2


These guys wont rest. They have used the contact us form on my site and left 4 entries in my guestbook which where promptly removed.

Looks like they will be around for a while looking at the way they are spamming people at the moment.

IP ban already in action for these.
6
Peekay
Re: Getting Spammed through contactus module LOL!!!

  • 2005/1/24 18:08

  • Peekay

  • XOOPS is my life!

  • Posts: 2335

  • Since: 2004/11/20


Burnzy, many thanks for the enquiry form, but I found it didn't correctly return the IP address dynamically allocated to my router by our ISP. I tracked down a similar script (onlyip) and replaced this part:
<?php $ipi = getenv("REMOTE_ADDR"); $httprefi = getenv ("HTTP_REFERER"); $httpagenti = getenv ("HTTP_USER_AGENT"); ?>

with this from the onlyip script:
<?php if (getenv('HTTP_X_FORWARDED_FOR')){$ipi=getenv('HTTP_X_FORWARDED_FOR');} else {$ipi=getenv('REMOTE_ADDR');} $httprefi = getenv ("HTTP_REFERER"); $httpagenti = getenv ("HTTP_USER_AGENT"); ?>

and it now returns my router IP correctly.

I confess I am a little confused as the dynamic address for the router is correctly identified by http://www.checkip.dyndns.org and http://www.showmyip.com, but I get a completely different result from the original form script and http://www.whatismyip.com.

Would welcome anyone's greater wisdom on this, as I don't want to bar the wrong IP addresses.
7
Peekay
Re: Getting Spammed through contactus module LOL!!!

  • 2005/1/25 0:45

  • Peekay

  • XOOPS is my life!

  • Posts: 2335

  • Since: 2004/11/20


Since discovered that the original script (and whatismyip.com) is identifying the IP of my NTL proxy server. Don't want to ban that... 'cos a lot of people use it as well as me!
8
panigrc
Re: Getting Spammed through contactus module LOL!!!

  • 2005/6/16 14:13

  • panigrc

  • Not too shy to talk

  • Posts: 133

  • Since: 2005/4/14


I have also the same problem. Perhaps if there was a verification with an image.

For example an image shows a shape and u select from a list, or with a number or so.
9
davidthomas1
Re: Getting Spammed through contactus module LOL!!!

Yes, that kind of image validation would prevent scripts sending spam and junk email via the contacts form.

The kind where text is rendered as an image and you have to enter the text to confirm you're not a script.

I wonder :

a) If such a plugin is available
b) how you can plug it into the contacts form?

hmmm...
10
DonXoop
Re: Getting Spammed through contactus module LOL!!!

I don't understand the panic over the occasional contact form spam. If the process of spamming isn't automated then it won't happen too often. I too have seen a few of them but it is rare. I'd likely upset real users if I forced image security just for a simple contact form. Other functions could benefit from higer security but the contact form is supposed to be easy. Forms are still much better than publishing email addresses.
(1) 2 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Latest GitHub Commits