Hi, original post was about this was started by someone else in the Technical Help Forum..
I thought it should come here (because its a complaint towards spam?)
I had the form mail set up so people could email me from the website... but I been getting ALOT of spam email from that for quiet some time now...
Someone is using the form mail to send me alot of spam. I even deleted all the HTML pages that has the form mail codes in it.. but I still get all the spam
When I go to preferences and change my email address (to a non-existant one) on eccentrix.com, all the spam mails stop.
If I look at the coding for the form mail, it has my account ID in it, so it is possible that they are using our account IDs to write some program USING eccentrix website so they can access the cgi of eccentrix and send us all spam mail using our account IDs (for the value="name") (and thus it will show up as from our form mail, thus the email address is from ourselves. because form mail is set to show that)
I'm not sure if others are getting these spam...
One thing that might help is that only our own accounts are able to use our own account ID to send form mails?
(I've tried to use a different account and see if using a different account ID still works for the form mail, and it does. If you combine that with something like a MacroMaker... we can have a potentially spam machine :p)
Or perhaps limit the amount of form mail a IP address can send in a day?
I'm getting like 100 of these spam mail from the form mail when I put back my email address on the preference. If I change it to a non existing email address the spam stops...
I will look at re-writing the form mail script to see if I can make any changes that would tie it more to the users account folder on the server. (Rewriting it will take some time, I will try to keep this post updated)
I re-wrote part of the module a few weeks ago and have been testing it. Have the spam emails stopped or slowed down from our site?
---------------
Cliff
Owner/Administrator