Re: Contact-Form-Spam...

Hi

That's the spam I meant :) That's not "normal" spam, but they try to 
missuse the form for mail-relaying and send the spam further. It doesn't 
work, as the formmailer is protected against that, but some mails still 
get through to the admin (but not to the others...).

There's already some protection in it (in 
inc/bx/filters/patforms/form2mail.php)

***
if(strpos($from, "\n") !== FALSE or strpos($from, "\r") !== FALSE) {
       return FALSE;
}
***

which prevents more common exploits, but the one below is not catched 
yet (again, it just doesn't work, the exploit, but you still get an 
email). Without the above lines, you would get even more, btw :)

The hidden formfield trick mentioned by philipp could help, it still 
works on the blog (most of the time). But I can't give you any 
timeframe, when we have implemented it

chregu





> 
> Anfang der weitergeleiteten E-Mail:
> 
>>
>>
>>
>>
>> Kontakt über *****
>> *****************************
>>
>> name                : ****
>> email               : *****
>> comments            : *****
>> pleaseContactMe     : 
>>
>>   man
>>   Content-Type: multipart/alternative; 
>> boundary=6b177fd1ddaa3778dfa893846798f43b
>>   MIME-Version: 1.0
>>   Subject: the
>>   bcc: [email protected] <mailto:[email protected]>
>>
>>   This is a multi-part message in MIME format.
>>
>>   --6b177fd1ddaa3778dfa893846798f43b
>>   Content-Type: text/plain; charset="us-ascii"
>>   MIME-Version: 1.0
>>   Content-Transfer-Encoding: 7bit
>>
>>   treet, answered perfectly to its name. he shoemakers had ranged 
>> their tables side by side. hese, and the rails which had been erected 
>> for the
>>   --6b177fd1ddaa3778dfa893846798f43b--
>>
>>   .
>>
>> ****
>>
>>
>>
> 

-- 
christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich
phone +41 44 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71
http://www.bitflux.ch | [email protected] |  GPG 0x5CE1DECB
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms