Re: Contact-Form was hacked????

On 4.3.2006 12:13 Uhr, Philipp Stucki wrote:
> 
> 
> No hackers around :) Just someone trying to use the contact form to spam 
> poor people's mailbox. The filter has a simple protection against that 
> attack but the mails still get through to the site owner.
> 
> I'm going to implement another simple trick soon because other people 
> seem to have problems with this as well.

See also this mail from last week:

http://lists.bitflux.ch/pipermail/bitflux-cms/2006-February/001956.html

chregu

> 
> HTH
> Philipp
> 
> Matthias Dieke wrote:
>> Hi,
>>
>> one of my Flux Cms powered sites (nordicwalking-kiel.de) has some trouble
>> with the contact form. All fields of the contact-form are filled with the
>> same value "[email protected]". This mail-adress doesn't 
>> exist.
>> Also checkbox-fields get these email-adress as value. Normaly the
>> checkboxvalues should be "0" or "1". The checkbox fields are: "Block_1",
>> "Block_2", "Block_3". Another mystic thing is that "BCC" also has a 
>> value.
>> As far as I remember the contact-form-plugin/filter doesn't support 
>> "BCC".
>>
>> Can anybody help me? What is the problem. Is this caused by Flux CMS 
>> or was
>> my server hacked?
>>
>> Thanks for your help.
>>
>> Matthias
>>
>>
>>>
>>> Verbindliche Anmeldung fuer Nordic Walking Kurs
>>> --------------------------------------------------------
>>>
>>> Kontaktdaten:
>>>
>>> Vorname:    [email protected]
>>> Nachname:   [email protected]
>>> Adresse:    iv
>>> Content-Type: multipart/alternative;
>>
>> boundary=a8ec3810de054f32064ff381e9e24a59
>>
>>> MIME-Version: 1.0
>>> Subject: e know th doctors say that if ye don
>>> bcc: [email protected]
>>>
>>> This is a multi-part message in MIME format.
>>>
>>> --a8ec3810de054f32064ff381e9e24a59
>>> Content-Type: text/plain; charset="us-ascii"
>>> MIME-Version: 1.0
>>> Content-Transfer-Encoding: 7bit
>>>
>>> astle, allynogue. y dear adam, return your adyship, r. lentworth, and 
>>> the
>>
>> isses ingleton, my most unfeigned and hearty thanks for your kind
>> congratulations on my unmerited promotion to the distinguished situation
>>
>>> --a8ec3810de054f32064ff381e9e24a59--
>>>
>>> .
>>> PLZ:        [email protected]
>>> Ort:        [email protected]
>>>
>>> E-mail:     [email protected]
>>> Tel.:       [email protected]
>>>
>>> Koerpergroesse in cm:   [email protected]
>>> Alter:   [email protected]
>>>
>>> Ich moechte gern an folgenden Kursen teilnehmen:
>>>
>>> Block_1: [email protected]
>>> Block_2: [email protected]
>>> Block_3: [email protected]
>>>
>>> Schnupperkurs: [email protected], am
>>
>> [email protected]
>>
>>> Verbindliche Erklaerungen:
>>>
>>> Hiermit erklaere ich, dass ich koerperlich gesund bin und mir keine
>>
>> Erkrankungen bekannt sind, die eine Teilnahme am Nordic Walking Kurs
>> gefaehrden koennten. : [email protected]
>>
>>> Die Kursgebuehr ist mir bekannt und ich werde diese am ersten
>>
>> Veranstaltungstag vor Ort in bar entrichten. :
>> [email protected]
>>
>>> Meine Anmeldung ist verbindlich: [email protected]
>>>
>>>
>>>
>>
>>
>>
> 
> 

-- 
christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich
phone +41 44 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71
http://www.bitflux.ch | [email protected] |  GPG 0x5CE1DECB
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms