Re: (spam)secure mailform
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.php archive

Re: (spam)secure mailform

From: Jerry Stuckle <jstucklex@attglobal.net>
Date: Mon Jul 18 2005 - 13:48:42 CEST

Robertico wrote:
>>What makes you think you NEED this level of security, anyway? What are
>>you
>>doing which leads you to suspect you'd have a problem with abuse of the
>>form?
>
>
> Nothing !.
> I don't like it when my mailbox is overfilled with irrelevant mails.
> I can't estimate how often this happens, but i'am aware of the risks using
> these forms
> I'am a newbie using php, so i'am interested is secure solutions.
> There are a lot of examples using a form, but not much about how to prevent
> abuse.
> I chose to use sessions :-))
>
> Robertico
>
>
>

Robertico,

The only way to not get spam is to not have an email box. Sessions won't
guarantee you don't get spammed, either! I could very eaily write a program
which would fill your email box - even with sessions. However, it's not worth a
spammer's time to spend several hours writing a custom script to spam a few
email addresses. In that same time the spammer can send millions of emails.

Of the dozens of email forms I've installed, I hear of only 3-4 abuses per year.
  And these were done by people on browsers, not automated systems.

OTOH, I've seen a LOT of spam go to email addresses which are published on web
pages and in newsgroups. Even with the efforts I've taken, on some of my ID's I
get > 1000 spams a week. But these aren't because of form mails.

And BTW - my spam filters take out most of it.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================
Received on Mon Oct 17 21:09:57 2005