Today's Posts Follow Us On Twitter! TFL Members on Twitter  
Forum search: Advanced Search  
Navigation
Marketplace
  Members Login:
Lost password?
  Forum Statistics:
Forum Members: 24,254
Total Threads: 80,792
Total Posts: 566,472
There are 1512 users currently browsing (tf).
 
  Our Partners:
 
  TalkFreelance     Design and Development     Programming     PHP and MySQL :

php mail problems

Thread title: php mail problems
Closed Thread    
    Thread tools Search this thread Display Modes  
09-13-2005, 09:36 AM
#1
soundsalarming is offline soundsalarming
soundsalarming's Avatar
Status: I'm new around here
Join date: May 2005
Location: Worcester UK
Expertise:
Software:
 
Posts: 11
iTrader: 0 / 0%
 

soundsalarming is on a distinguished road

  Old  php mail problems

I've got a basic php mail script on my site that I'm having a few problems with.

The script sends me the content of a submitted contact form using the mail() function and it works very well, but a while ago it started sending me emails with all blank fields, which didn't worry me to much.

Recently though I've been getting emails from it that contain an email address in every field. The addresses are random digits @ mydomain.com [EG. kjhdkjh@mydomain.com] even in the IP and browser information fields.

Now I presume someone is trying to use the script to send spam, and I guess it's reasonably simple to stop but I'm reaching the limits of my php knowledge here so I'm hoping that one of you guys could point me in the right direction.

My URL is http://sounds-alarming.co.uk

09-16-2005, 04:07 AM
#2
Andrew K is offline Andrew K
Andrew K's Avatar
Status: Member
Join date: Apr 2005
Location: Sydney Australia
Expertise:
Software:
 
Posts: 109
iTrader: 0 / 0%
 

Andrew K is on a distinguished road

  Old

Same thing here..

http://www.sitepoint.com/forums/showthread.php?t=299286

what you need is a validating script, you know with the numbers at the bottom ensuring that a human is filling out your form.
go to hotscripts.com in the php section im sure there is somehting there, also dreamweaver if you have it has a button under application or something that can check to make sure everything is legit.

09-16-2005, 06:27 PM
#3
bailo is offline bailo
Status: Member
Join date: Sep 2005
Location: Leeds, UK
Expertise:
Software:
 
Posts: 292
iTrader: 0 / 0%
 

bailo is on a distinguished road

  Old

you definately need to have a good look at your script, the last thing you want is for spammers to be able to add extra headers into the script and use it to send spam:
http://securephp.damonkohler.com/ind...mail_Injection

This article has some interesting stuff about it

Closed Thread    


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

  Posting Rules  
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump:
 
  Contains New Posts Forum Contains New Posts   Contains No New Posts Forum Contains No New Posts   A Closed Forum Forum is Closed