Skip to main content
maryanns50585047
Known Participant
Mar 17, 2021 7:19 PM UTC
Question

PHP form is sending robot type responses on my form.

I have a contact is form on my webite. https://www.selvastudios.com/contact.info.php

Typically I RARELY get a message from anyone. Lately I am getting a message every few days that is scrambled and likely robo-generated. Could my page be hacked or need updating to new php coding? What do I need to do??!

 

Here is the message I received this morning. Note the nonsensical responses to the fields...

w....r@s....s.com

From: Gena
Address: Ufhusen
City: Gena
State: Gena
ZipCode: 6153
EMail: g.....a@s......s.com
Brochure Choice: Photo 2
Referred By: Pxq perwyt t
Message: You Won't Want To Miss This!

 

[moderator note: made email addresses unrecognisable to fool email harvesters]

    This topic is closed to new replies. Start a new post to keep the conversation going.

    5 replies

    Nancy OShea
    Community Expert
    Community Expert
    Mar 17, 2021 10:32 PM UTC

    Another trick is to ask a question that only a human can answer like "What is the color of red wine?"  Or "Who is burried in Grant's Tomb?"

     

    Program your PHP script to reject incorrect answers and abort form processing. This works for robot submissions but unfortunately there's nothing much you can do about human spammers.

     

    Translate
    Nancy O'Shea— Product User & Community Expert
    BenPleysier
    Community Expert
    Community Expert
    Mar 17, 2021 10:01 PM UTC

    Do you check for the correct answer on the server?

    Maybe choose random numbers to give a different answer each time

     

    I use a hidden field that bots tend to populate. On the server, I reject ny posts with a populated hidden field.

    Translate
    Wappler is the DMXzone-made Dreamweaver replacement and includes the best of their powerful extensions, as well as much more!
    maryanns50585047
    Known Participant
    Mar 18, 2021 12:08 PM UTC
    thanks for your input. Clearly, I need to work on the human test!
    Translate
    B i r n o u
    Legend
    Mar 17, 2021 7:49 PM UTC

    yes it looks like  a bot... so to protect from it, you will have to use a human action needed.

    captcha is one of them, https://en.wikipedia.org/wiki/CAPTCHA  but today most of the bot knows how to workaround it...

    you can also place a honey pot for bots https://www.thryv.com/blog/honeypot-technique/

    You can also work on a technique that consists in asking a question related to a picture that proposes a mathematical operation to solve, or any other type of question that links a visual and a logic.
    In any case, there is no perfect and infallible solution.

    Your test is easy enough to circumvent, the same logic in the form of an image is already more complex to circumvent.

    Translate
    Jon Fritz
    Community Expert
    Community Expert
    Mar 17, 2021 7:37 PM UTC

    I's probably not a hack, just a more sophisticated spam bot encountering a relatively lackluster "human test".

    It's pretty unlikely that there's anything to worry about. 

    Translate