Spam code for mail form?

[awarner20]

Hello,

I recently started using a free php form mailer called nvform.php for a contact form I'm using on a website I've made (winterwaterwonderland.com). Since I've put it up I've been getting emails from [e-mail], [e-mail], and a many other variations on this theme.

Would anyone be able to assist me with what code I need to include in this php and where in the form I would need to put it? I am a complete novice at php (that's why I'm using this free nvform.php).

Here's the php form code...

<?php

/*

##########################################################################################

FILE: nvform.php

Novice Form Version 1.1

© Copyright 2000-2003 Seth Michael Knorr [e-mail]

http://www.noviceform.com/

Please contact me with any bugs found, or any bug fixes.

##########################################################################################

There is no email support provided for this script, the only support can be

found at our web site: http://www.noviceform.com/

ANY PERSON(S) MAY USE AND MODIFY THESE SCRIPT(S) FREE OF CHARGE FOR EITHER BUSINESS

OR PERSONAL, HOWEVER AT ALL TIMES HEADERS AND COPYRIGHT MUST ALWAYS REMAIN IN TACT.

REDISTRIBUTION FOR PROFIT IS PROHIBITED WITH OUT THE CONSENT OF SETH KNORR.

By using this code you agree to indemnify Seth M. Knorr from any liability that

might arise from its use.

##########################################################################################

*/

/ $sendto is the email where form results are sent to /

$sendto = "[e-mail]";

/ $ccto is the email where form results can be carbon copied to /

$ccto = "";

/*

     O P T I O N A L   V A R I A B L E S 

*/

/*

TO POST PHP ERRORS TO PAGE FOR DEBUGING SET:

$report_errors = "ALL";

TO REMOVE PHP ERRORS FROM POSTING TO THE PAGE FOR USE SET:

$report_errors = "NONE";

*/

$report_errors = "NONE";

$setokurl = "2";

$okurls = "http://yourdomain.com,http://www.yourdomain.com,192.103.45.67";

/*

    N O   N E E D   T O   E D I T   A N Y   V A R I A B L E S   B E L O W

*/

$footer = "<br><br><br><br><br><center><font face=\"Arial\"><a href=\"http://www.noviceform.com/\" target=\"_blank\"><font color=\"#ff0000\">Form processing script provided by Novice Form</font></a> </center></font>";

$backbutton = "<br><br><b>Hit your browsers back button and resubmit the form.</b>";

if ($report_errors == "NONE") {

error_reporting(0);

}else{

error_reporting(E_ALL);

}

/ --- I F S E T O K U R L = 1 ----- /

if ($setokurl == "1"){

$found_url = "0";

$referer =$_SERVER["HTTP_REFERER"];

$referer = str_replace("://", "[CS]", $referer);

$referer_sp = explode("/", $referer);

$referer = "$referer_sp[0]";

$referer .= "/";

$referer = str_replace("[CS]", "://", $referer);

$referer = strtolower($referer);

$okurls = split(",", $okurls);

foreach ($okurls as $myokurls) {

$myokurls = strtolower($myokurls);

 if ($referer == strtolower($myokurls)) { 

  $found_url = "1"; 

  }

}

if ($found_url == "0") {

$ERROR_action = "bad_okurl";

include("$PATH_error$PAGE_error");

}

}

/ --- E N D I F S E T O K U R L = 1 --- /

/ check to see if posted /

if ($HTTP_GET_VARS || ! $HTTP_POST_VARS || $GET || ! $POST) {

include("nverror.php");

no_pst();

}else{

/ IF OLDER VERSION OF PHP CONVERT TO NEWER VARIABLES /

if (! $_POST) {

$_POST = "$HTTP_POST_VARS";

}



if (! $_SERVER) {

$_SERVER = "$HTTP_SERVER_VARS";

}

$year = date("Y");

$month = date("m");

$day = date("d");

$hour = date("h");

$min = date("i");

$tod = date("a");

$ip=$_SERVER["REMOTE_ADDR"];

$SEND_prnt = "The form below was submited by " . $_POST{"email"} . " from Ip address: $ip on $monthnameactual $month/$day/$year at $hour:$min $tod \n";

$SEND_prnt .= "-------------------------------------------------------------------------\n\n";

/ CHECK TO SEE IF $_POST{"required"} IS SET /

if ($_POST{"required"}){

$post_required = $_POST{"required"};

$required = split(",", $post_required);

$reqnum = count($required);

for ($req=0; $req < $reqnum; $req++) {



$REQ_name = $required[$req];

$REQ_value = $POST{"$REQ_name"};

if ($REQ_name == "email") {

 $goodem = ereg("^[^@ ]+@[^@ ]+\.[^@ \.]+$", $_POST{"email"}, $trashed);



    if (! $goodem) {

include("nverror.php");

msng_email();

    }  /* end ! $goodem */

}

elseif (! $_POST{"$REQ_name"}) {

	 $isreqe = "1";

	 $REQ_error .= "<li> $REQ_name ";

	 } /* end ! req val */



      } /* end REQ for loop  */





            /* IF THERE ARE ANY REQUIRED FIELDS NOT FILLED IN */



	if ($isreqe == "1") {

	include("nverror.php");

	msng_required();

	}

} / END CHECK TO SEE IF $_POST{"required"} IS SET /

/ END IF THERE ARE ANY REQUIRED FIELDS NOT FILLED IN /

/ GET POSTED VARIABLES /

foreach ($_POST as $NVPOST_name => $NVPOST_value) {

$NVPOST_value = str_replace("\r", "", $NVPOST_value);

$NVPOST_value = preg_replace("'\cc:'si", "Cc ", $NVPOST_value);

$NVPOST_value = preg_replace("'\bcc:'si", "bcc ", $NVPOST_value);

$NVPOST_value = preg_replace("'\to:'si", "to ", $NVPOST_value);

$NVPOST_value = preg_replace("'\bc:'si", "bc ", $NVPOST_value);

if (strtolower($NVPOST_name) == "subject") {



$NVPOST_value = str_replace(":", ";", $NVPOST_value);

}





        /* G E T   E M A I L */



        if (strtolower($NVPOST_name) == "email") {

        $SEND_email = "$NVPOST_value";

    $SEND_email = str_replace(":", "", $SEND_email);

    $SEND_email = str_replace(" ", "", $SEND_email);

        }



        /* END GET LEADS EMAIL */

if (! $_POST{"sort"}) {

                        /* CHECK TO SEE IF CONFIG FIELD */

                        if ($NVPOST_name == "subject" || $NVPOST_name == "sort" || $NVPOST_name == "required" || $NVPOST_name == "success_page"){}else{

                        $SEND_prnt .= "$NVPOST_name;  $NVPOST_value \n";

                        }

} / end ! sort /

} / end foreach /

/ END GET POSTED VARIABLES /

if ($_POST{"sort"}) {

/ SORT VARIABLES /

$sortvars = split(",", $_POST{"sort"});

$sortnum = count($sortvars);



           for ($num=0; $num < $sortnum; $num++) {

       $SEND_prnt .= "$sortvars[$num]: " . $_POST{"$sortvars[$num]"} . " \n";

       }

} / END SORT VARIABLES /

/ send mail /

if (! $ccto) {

$header = "From: $SEND_email\r\nReply-to: $SEND_email";

}else{

$header = "From: $SEND_email\r\nReply-to: $SEND_email\r\nCc: $ccto";

}

mail($sendto, $_POST{"subject"}, $SEND_prnt, $header);

/ END sendmail /

 /* CHECK TO SEE IF FORM SPECIFYS A SUCCESS PAGE */

 if (! $_POST{"success_page"}) {

include("nverror.php");

default_success();

 }else{

 $successpage=$_POST{"success_page"};

 header("Location: $successpage");  /* redirect */  

 exit;

 }

} / END IF POSTED /

?>

Thank you in advance for any and all assistance.

[bradgrafelman]

Notice that you haven't gotten any replies? The code you posted is:

1. WAY. TOO. BIG!

2. not wrapped in the forum's PHP tags.

[nickadeemus2002]

in my opinion, is to implement a captcha library that will create a random code on an image and have the person filling out the mail form verify it. if the code isn't verified, nothing is sent. if it is, you get the message. i don't know if that's too hard to you to do, but maybe you can ask someone to help out

[awarner20]

I posted it "as is". As I stated, I am a complete php novice. I don't know if the spaces in the code matter or not. If this is too big, I sincerely apoligize.

Still, any assistance would be greatly appreciated.

[awarner20]

nickadeemus2002,

Thanks for your advice. Yes, it is above my head, but I'm sure I can research "captcha library" and gain some knowledge. Thank you. i will look into it🙂

I was under the impression, that there may be a simple code I could add to the existing code...is that too naive?

[nickadeemus2002]

I was under the impression, that there may be a simple code I could add to the existing code...is that too naive?

yes, that was a little to naive. even using regular expressions and verifying isp addresses to make sure they are valid is a tricky thing. i think the captcha solution would be your best bet. good luck.

[mobe]

Add this to the top of your script after the <?php.

if ( strstr($_POST['email'], '@winterwaterwonderland.com') ){
 echo 'SPAM not sent'; 
 exit;
}

This bit of code checks to see if the email address on the posted form contain '@winterwaterwonderland.com' if it does it will exit the script and say SPAM not sent

[awarner20]

Mobe,

Thanks a lot, I'll try it! I have been searching for a couple days now on "captcha" and how to implement it. It gets confusing to me pretty quickly, but I am learning a lot so far.

I will insert the code you posted and post back when it's tested.

Thanks again!

[mobe]

No problem.

You can always change the message to "You IP and hostname has been recorded and will be sending your ISP an email."

although most spammers use software/robots and won't see the message.