Re: Contact-Form was hacked????

Philipp Stucki <[email protected]> Sat, 04 Mar 2006 12:13:20 +0100
Newsgroups gmane.comp.cms.bitflux.general
Message-ID <[email protected]>

No hackers around :) Just someone trying to use the contact form to spam 
poor people's mailbox. The filter has a simple protection against that 
attack but the mails still get through to the site owner.

I'm going to implement another simple trick soon because other people 
seem to have problems with this as well.

HTH
Philipp

Matthias Dieke wrote:
> Hi,
> 
> one of my Flux Cms powered sites (nordicwalking-kiel.de) has some trouble
> with the contact form. All fields of the contact-form are filled with the
> same value "[email protected]". This mail-adress doesn't exist.
> Also checkbox-fields get these email-adress as value. Normaly the
> checkboxvalues should be "0" or "1". The checkbox fields are: "Block_1",
> "Block_2", "Block_3". Another mystic thing is that "BCC" also has a value.
> As far as I remember the contact-form-plugin/filter doesn't support "BCC".
> 
> Can anybody help me? What is the problem. Is this caused by Flux CMS or was
> my server hacked? 
> 
> 
> Thanks for your help.
> 
> Matthias
> 
> 
>>
>>Verbindliche Anmeldung fuer Nordic Walking Kurs
>>--------------------------------------------------------
>>
>>Kontaktdaten:
>>
>>Vorname:    [email protected]
>>Nachname:   [email protected]
>>Adresse:    iv
>>Content-Type: multipart/alternative;
> 
> boundary=a8ec3810de054f32064ff381e9e24a59
> 
>>MIME-Version: 1.0
>>Subject: e know th doctors say that if ye don
>>bcc: [email protected]
>>
>>This is a multi-part message in MIME format.
>>
>>--a8ec3810de054f32064ff381e9e24a59
>>Content-Type: text/plain; charset="us-ascii"
>>MIME-Version: 1.0
>>Content-Transfer-Encoding: 7bit
>>
>>astle, allynogue. y dear adam, return your adyship, r. lentworth, and the
> 
> isses ingleton, my most unfeigned and hearty thanks for your kind
> congratulations on my unmerited promotion to the distinguished situation
> 
>>--a8ec3810de054f32064ff381e9e24a59--
>>
>>.
>>PLZ:        [email protected]
>>Ort:        [email protected]
>>
>>E-mail:     [email protected]
>>Tel.:       [email protected]
>>
>>Koerpergroesse in cm:   [email protected]
>>Alter:   [email protected]
>>
>>Ich moechte gern an folgenden Kursen teilnehmen:
>>
>>Block_1: [email protected]
>>Block_2: [email protected]
>>Block_3: [email protected]
>>
>>Schnupperkurs: [email protected], am
> 
> [email protected]
> 
>>Verbindliche Erklaerungen:
>>
>>Hiermit erklaere ich, dass ich koerperlich gesund bin und mir keine
> 
> Erkrankungen bekannt sind, die eine Teilnahme am Nordic Walking Kurs
> gefaehrden koennten. : [email protected]
> 
>>Die Kursgebuehr ist mir bekannt und ich werde diese am ersten
> 
> Veranstaltungstag vor Ort in bar entrichten. :
> [email protected]
> 
>>Meine Anmeldung ist verbindlich: [email protected]
>>
>>
>>
> 
> 
> 


-- 
philipp stucki . bitflux GmbH . schoeneggstrasse 5 . CH-8004 zurich
[email protected]  .  phone +41 1 240 56 70 .  fax +41 1 240 56 71
http://www.bitflux.ch
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms