Contact Us form is possible to be hacked?

[toptiara]

This is from my hosting company

 

"A number of users have recently had their accounts suspended after contact forms were hacked.

 

If you have a contact form please ensure that it is secure and that it includes input validation designed to avoid email header injection.

 

A useful tutorial can be found at:

 

http://www.jellyandcustard.com/2006/02/24/...jection-in-php/ We regret any accounts abused as a result of poorly coded contact scripts will be suspended and may be terminated without prior warning."

 

I have no idea where I can change the code for this. Ive looked in contact_us.php in \includes\languages\english but that doesnt have the code within... Anyone help me please?

 

Thanks

[ozcsys]

This is from my hosting company

 

"A number of users have recently had their accounts suspended after contact forms were hacked.

 

If you have a contact form please ensure that it is secure and that it includes input validation designed to avoid email header injection.

 

A useful tutorial can be found at:

 

http://www.jellyandcustard.com/2006/02/24/...jection-in-php/ We regret any accounts abused as a result of poorly coded contact scripts will be suspended and may be terminated without prior warning."

 

I have no idea where I can change the code for this. Ive looked in contact_us.php in \includes\languages\english but that doesnt have the code within... Anyone help me please?

 

Thanks

 

 

You might want to try the fix found

here