Spam in Forms

[Mary Ann]

I finially figured out my SSL problem on my form. Now that it's up and
running I'm receiving spam through the form. I emailed my host and they said:
It appears that someone is using an automated script to fill out the form
that is located on your site. There are various ways to secure a form on a
site, however, we cannot provide instructions or assistance with custom
scripting.

Ok, now what should I do besides thinking about changing hosts.


Happy Holidays!
Mary Ann

 

[Thomas A. Rowe]

What form Handler are you using to process this form?

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage

http://www.Ecom-Data.com
==============================================

 

[Mary Ann]

oops, forgot to provide the info.
Here's the form.
https://www.beachcarts4shore.com/salesform.htm

gdform.asp

 

[David Berry]

If you are using ASP as your forms handler then you should be able to
control SPAM. Since this is an order form nothing should be getting
submitted or emailed until after the order is placed and payment verified.
How are you getting SPAM?

 

[Mary Ann]

This is one example of what I received:

Received: (qmail 12072 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from pre-smtp20-01.prod.mesa1.secureserver.net ([64.202.166.34])
(envelope-sender <[email protected]>)
by smtp05-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
Received: (qmail 12055 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from unknown (HELO smtpout19-01.prod.mesa1.secureserver.net)
([68.178.232.17])
(envelope-sender <[email protected]>)
by pre-smtp20-01.prod.mesa1.secureserver.net (qmail-ldap-1.03)
with SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
Received: (qmail 7558 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from unknown (HELO whssl101) ([208.109.78.115])
(envelope-sender <[email protected]>)
by smtpout19-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with
SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
thread-index: AccloSQVhaV2ztpGRm2WGJi3eCL5gA==
Thread-Topic: (e-mail address removed)
From: <[email protected]>
To: <[email protected]>
Subject: (e-mail address removed)
Date: Fri, 22 Dec 2006 01:14:02 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
X-Nonspam: Statistical 63%
X-NAS-BWL: No match found for '(e-mail address removed)' (322 addresses,
0 domains)
X-NAS-Language: English
X-NAS-Bayes: #0: 1.7628E-021; #1: 1
X-NAS-Classification: 0
X-NAS-MessageID: 2128
X-NAS-Validation: {DFF16927-88E6-4EAA-A097-460B7E65289B}

 

[David Berry]

Are you sure this came from your from? Did the email contain information
from the form? If you're using ASP to send the form then I don't see how a
robot script could be executing the server-side script and sending the form.
On your script make sure that at least one field is filled in before an
email is sent. Also, the sender's address should be in your ASP script,
passed from the form.

This is one example of what I received:

Received: (qmail 12072 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from pre-smtp20-01.prod.mesa1.secureserver.net ([64.202.166.34])
(envelope-sender <[email protected]>)
by smtp05-01.prod.mesa1.secureserver.net (qmail-ldap-1.03) with
SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
Received: (qmail 12055 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from unknown (HELO smtpout19-01.prod.mesa1.secureserver.net)
([68.178.232.17])
(envelope-sender <[email protected]>)
by pre-smtp20-01.prod.mesa1.secureserver.net (qmail-ldap-1.03)
with SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
Received: (qmail 7558 invoked from network); 22 Dec 2006 08:14:02 -0000
Received: from unknown (HELO whssl101) ([208.109.78.115])
(envelope-sender <[email protected]>)
by smtpout19-01.prod.mesa1.secureserver.net (qmail-ldap-1.03)
with
SMTP
for <[email protected]>; 22 Dec 2006 08:14:02 -0000
thread-index: AccloSQVhaV2ztpGRm2WGJi3eCL5gA==
Thread-Topic: (e-mail address removed)
From: <[email protected]>
To: <[email protected]>
Subject: (e-mail address removed)
Date: Fri, 22 Dec 2006 01:14:02 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
X-Nonspam: Statistical 63%
X-NAS-BWL: No match found for '(e-mail address removed)' (322
addresses,
0 domains)
X-NAS-Language: English
X-NAS-Bayes: #0: 1.7628E-021; #1: 1
X-NAS-Classification: 0
X-NAS-MessageID: 2128
X-NAS-Validation: {DFF16927-88E6-4EAA-A097-460B7E65289B}




--
Thanks, Mary Ann

If you are using ASP as your forms handler then you should be able to
control SPAM. Since this is an order form nothing should be getting
submitted or emailed until after the order is placed and payment
verified.
How are you getting SPAM?