webdrone
asked on
How do I deal with my FormMail results being corrupted by scripts?
I run a web site that provides information and answers questions vis a FormMail page. For the past week, all of my results are either invaded or corrupted. Instead of getting legitimate questions, I get variations of the following:
*****
Below is the result of your feedback form. It was submitted by
Scot Mcclure () on Tuesday, September 30, 2008 at 08:26:55
-------------------------- ---------- ---------- ---------- ---------- ---------
Question(s): lcbpy7xhuls31p16
<a href= http://mocfcpf.com >eytygd xgsgjysg</a>
http://yziwwwjxhs.com
<a href= http://sdturvqkup.com >ziqsj kjkuu</a>
http://bhszkogwf.com
<a href= http://vtowpl.com >muubdr gvqxlow</a>
http://zbmtmd.com
<a href= http://xkydvsz.com >iikenc zujyg</a>
http://mexdfky.com
answer: by email ONLY
from: Craig Boyd
Submit: Submit Question
-------------------------- ---------- ---------- ---------- ---------- ---------
*****
Note that the "submitted by" and "from:" fields do not match - this is characteristic of all results. I have not clicked on any of the "links" and have simply deleted these messages, but they are becoming a problem and now am thinking this requires action. Please advise. Thank you.
*****
Below is the result of your feedback form. It was submitted by
Scot Mcclure () on Tuesday, September 30, 2008 at 08:26:55
--------------------------
Question(s): lcbpy7xhuls31p16
<a href= http://mocfcpf.com >eytygd xgsgjysg</a>
http://yziwwwjxhs.com
<a href= http://sdturvqkup.com >ziqsj kjkuu</a>
http://bhszkogwf.com
<a href= http://vtowpl.com >muubdr gvqxlow</a>
http://zbmtmd.com
<a href= http://xkydvsz.com >iikenc zujyg</a>
http://mexdfky.com
answer: by email ONLY
from: Craig Boyd
Submit: Submit Question
--------------------------
*****
Note that the "submitted by" and "from:" fields do not match - this is characteristic of all results. I have not clicked on any of the "links" and have simply deleted these messages, but they are becoming a problem and now am thinking this requires action. Please advise. Thank you.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You can try this (assuming the field should never hold an http):
<form action="goawayrobotsandpeoplenotusingjavascript.html">
<input type="text" name="questions" value="">
<script>
document.write('<input type="button" value="Submit" '+
'onClick="if (this.form.questions.value.indexOf('http')==-1) { this.form.action=\'formmail.php\'; this.form.submit()}">')
</script>
</form>
ASKER