Re: Contact-Form was hacked????

"Matthias Dieke" <[email protected]> Sat, 4 Mar 2006 13:14:29 +0100 (MET)
Newsgroups gmane.comp.cms.bitflux.general
Message-ID <[email protected]>
Hi, 

tanks for your fast reply. F*** spam ;)

Froms Philipps last-week-mail:

We could add the simple hidden by css field trick which catches at least 
the robots but not the human spammers. Or is that one already obsolete?

How to do this?

What do you think about a auto-generated picture? I don't know the right
name now for this. You can find this on many sites. When you like to
register you have to type in the letters and nummbers from the
auto-generated picture. So we have some protection for the robots.

Thanks.

Matthias

> 
> 
> 
> On 4.3.2006 12:13 Uhr, Philipp Stucki wrote:
> > 
> > 
> > No hackers around :) Just someone trying to use the contact form to spam
> > poor people's mailbox. The filter has a simple protection against that 
> > attack but the mails still get through to the site owner.
> > 
> > I'm going to implement another simple trick soon because other people 
> > seem to have problems with this as well.
> 
> See also this mail from last week:
> 
> http://lists.bitflux.ch/pipermail/bitflux-cms/2006-February/001956.html


> 
> chregu
> 
> > 
> > HTH
> > Philipp
> > 
> > Matthias Dieke wrote:
> >> Hi,
> >>
> >> one of my Flux Cms powered sites (nordicwalking-kiel.de) has some
> trouble
> >> with the contact form. All fields of the contact-form are filled with
> the
> >> same value "[email protected]". This mail-adress doesn't 
> >> exist.
> >> Also checkbox-fields get these email-adress as value. Normaly the
> >> checkboxvalues should be "0" or "1". The checkbox fields are:
> "Block_1",
> >> "Block_2", "Block_3". Another mystic thing is that "BCC" also has a 
> >> value.
> >> As far as I remember the contact-form-plugin/filter doesn't support 
> >> "BCC".
> >>
> >> Can anybody help me? What is the problem. Is this caused by Flux CMS 
> >> or was
> >> my server hacked?
> >>
> >> Thanks for your help.
> >>
> >> Matthias
> >>
> >>
> >>>
> >>> Verbindliche Anmeldung fuer Nordic Walking Kurs
> >>> --------------------------------------------------------
> >>>
> >>> Kontaktdaten:
> >>>
> >>> Vorname:    [email protected]
> >>> Nachname:   [email protected]
> >>> Adresse:    iv
> >>> Content-Type: multipart/alternative;
> >>
> >> boundary=a8ec3810de054f32064ff381e9e24a59
> >>
> >>> MIME-Version: 1.0
> >>> Subject: e know th doctors say that if ye don
> >>> bcc: [email protected]
> >>>
> >>> This is a multi-part message in MIME format.
> >>>
> >>> --a8ec3810de054f32064ff381e9e24a59
> >>> Content-Type: text/plain; charset="us-ascii"
> >>> MIME-Version: 1.0
> >>> Content-Transfer-Encoding: 7bit
> >>>
> >>> astle, allynogue. y dear adam, return your adyship, r. lentworth, and 
> >>> the
> >>
> >> isses ingleton, my most unfeigned and hearty thanks for your kind
> >> congratulations on my unmerited promotion to the distinguished
> situation
> >>
> >>> --a8ec3810de054f32064ff381e9e24a59--
> >>>
> >>> .
> >>> PLZ:        [email protected]
> >>> Ort:        [email protected]
> >>>
> >>> E-mail:     [email protected]
> >>> Tel.:       [email protected]
> >>>
> >>> Koerpergroesse in cm:   [email protected]
> >>> Alter:   [email protected]
> >>>
> >>> Ich moechte gern an folgenden Kursen teilnehmen:
> >>>
> >>> Block_1: [email protected]
> >>> Block_2: [email protected]
> >>> Block_3: [email protected]
> >>>
> >>> Schnupperkurs: [email protected], am
> >>
> >> [email protected]
> >>
> >>> Verbindliche Erklaerungen:
> >>>
> >>> Hiermit erklaere ich, dass ich koerperlich gesund bin und mir keine
> >>
> >> Erkrankungen bekannt sind, die eine Teilnahme am Nordic Walking Kurs
> >> gefaehrden koennten. : [email protected]
> >>
> >>> Die Kursgebuehr ist mir bekannt und ich werde diese am ersten
> >>
> >> Veranstaltungstag vor Ort in bar entrichten. :
> >> [email protected]
> >>
> >>> Meine Anmeldung ist verbindlich: [email protected]
> >>>
> >>>
> >>>
> >>
> >>
> >>
> > 
> > 
> 
> -- 
> christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich
> phone +41 44 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71
> http://www.bitflux.ch | [email protected] |  GPG 0x5CE1DECB
> 

-- 
Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer!
Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
-- 
bitflux-cms mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bitflux-cms