Re: help protecting form to email from spammers
- From: "Norman Peelman" <npeelman@xxxxxxxxxx>
- Date: Tue, 29 Aug 2006 00:52:01 GMT
"J W" <jwhitley31NOSPAM@xxxxxxxx> wrote in message
news:982DA4A64karlcsueduco@xxxxxxxxxxxxxxxxx
Hello,
I am kind of a newb to php and could use some help. I have made a form to
email php page that uses the mail function to send me the results of a
form. The php portion looks like this:
<?PHP
if ($submit) {
$Address = !empty($Address) ? $Address : 'NA';
$Address2 = !empty($Address2) ? $Address2 : 'NA';
$City = !empty($City) ? $City : 'NA';
$State = !empty($State) ? $State : 'NA';
$Country = !empty($Country) ? $Country : 'NA';
$Postal = !empty($Postal) ? $Postal : 'NA';
$Phone = !empty($Phone) ? $Phone : 'NA';
$Company = !empty($Company) ? $Company : 'NA';
$EmailNot = !empty($EmailNot) ? $EmailNot : 'NO';
$today = date("m/d/y");
mail("me@xxxxxxxxxxxx",
"Info on $Regarding",
"A User has submitted a Contact form on Mydomain.com
on $today
================================================
Name: $FName $LName
Email: $Email
Address: $Address
$Address2
$City
$State
$Country
$Postal
Phone: $Phone
Company: $Company
Message: $Comment
Referer: $Referer
Opt-Out: $EmailNot",
"From: $FName $LName <$Email>");
header ("location: thanks.html");
} // end if they hit "Submit"
?>
Later on the page is the form itself (edited for brevity):
<form name="contactinfo" method="post">
(various input areas)
</form>
I know that as is this page isn't secure from a spammer exploiting it for
their own purposes. Can someone help me clean it up to protect against
that kind of thing? I believe the input data has to be validated /
scrubbed or something? I've been googling and while I understand the
concept I'm not quite getting how to do it within the framework of what I
have already created,
Thanks much.
Since it appears that you have safe mode off, then you need to run each one
of your form variables through a validation process (preferable before your
'mail()' call). If you do a search at www.phpclasses.org for validation
scripts you'll find alot to choose from. Here is another good read:
http://phpsec.org/projects/guide/1.html with examples. And
http://www.nyphp.org/phundamentals/email_header_injection.php
Norm
.
- References:
- Prev by Date: help protecting form to email from spammers
- Next by Date: Re: help protecting form to email from spammers
- Previous by thread: help protecting form to email from spammers
- Next by thread: Re: help protecting form to email from spammers
- Index(es):
Relevant Pages
|
