Spam emails- recieving 5000 emails aday, due to Contact_us.php

philpop · May 18, 2006

Hi Peoples,

Last couple of Days, I have had a seriouse problem. I have been getting thousands of crap email, i mean, emails that make no sence and piss you off. Our internet hoster is getting flooded with these emails, and told us that people are using the "contact_us.php" Form and sending multiple emails. These emails dont have a reply address, they seem to be self generated somehow. The web provider has asked us to completly remove the contact us form from the site.

Is any one else having this problem? If so, how can I stop this? I thought about removing the contact "Form" from my website, and just putting an image with our web address in its place. this means customers wil have to manually type the email address in their own email software such as outlook. Do I really have to do this, or is there another fix? Also If the pic is the only solution, how do I insert the pic instead of the contact us Form? I have edited "contact_us.php" but the "form" is still there, how do I edit that form?

any help would be much appreciated, this is driving me up the wall. :)

cheers

Phil

philpop · May 18, 2006

this is what the webhoster told us

"

The microheliworkz contact us form is being exploited? i.e. using the form to spam people, and as a consequence, sales@microheli is getting a copy of each one ? there were nearly 5000 msgs on the queue ? I have cleared the queue, but more will appear ? could you please disable the form and investigate ? there is probably a security hole in the form.

I will have to suspend the entire account if this cannot happen ? otherwise the server will be blacklisted.

I have attached one of the emails?

Please let me know.

philpop · May 18, 2006

this is one of the spamers

1FgQ8r-00068a-6C-H

nobody 99 99

<[email protected]>

1147888141 0

-ident nobody

-received_protocol local

-body_linecount 30

-auth_id nobody

-auth_sender [email protected]

-allow_unqualified_recipient

-allow_unqualified_sender

-local

25

124P Received: from nobody by jupiter.caserver1.com with local (Exim 4.52)

id 1FgQ8r-00068a-6C; Thu, 18 May 2006 01:49:01 +0800

039T To: "Mhw" <[email protected]>

026 Subject: Enquiry from Mhw

036F From: "[email protected]

076 Content-Type: multipart/alternative; boundary="===============0514358024=="

018 MIME-Version: 1.0

035F From: [email protected]

093 Subject: There is no reason to be self-concious about your appearance,

lose that fat today!

584* bcc: [email protected], [email protected], [email protected],

[email protected], [email protected], [email protected],

[email protected], [email protected],

[email protected], [email protected]

054I Message-Id: <[email protected]>

038 Date: Thu, 18 May 2006 01:49:01 +0800

1FgQ8r-00068a-6C-D

This is a multi-part message in MIME format.

--===============0514358024==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

_HTML__FONT SIZE=2 PTSIZE=10 FAMILY="SANSSERIF" FACE="Arial" LANG="0"_Introducing the most effective appetite suppressant currently available, and one of the only products on the market proven in study after study to actually shed pounds, the average user losing nearly 10 pounds within just 2-3 weeks of regular usage._BR_

_BR_

All of the major drug companies are currently competing for distribution rights, yet it will take at least a year or two until they are able to sell the product. You don't need to wait! We have Hoodia NOW, and at a fraction of the cost you will pay when its released by Pfizer or one of the other major pharmaceutical companies._BR_

_BR_

This is not imitation or generic Hoodia, this is the real thing, and you cannot buy this in stores... most importantly, science has not only proven its effectiveness but also its safety. There are no side effects, its as safe and harmless as a multivitamin!_BR_

_BR_

Lastly, with our solid money back guarantee, you have nothing to lose but the excess weight... if you don't see the results you expect, every penny is immediately refunded!_BR_

_BR_

_/FONT__FONT COLOR="#0000ff" BACK="#ffffff" style="BACKGROUND-COLOR: #ffffff" SIZE=3 PTSIZE=12 FAMILY="SANSSERIF" FACE="Arial" LANG="0"__B__A HREF=http://www.pure-all.com_For more Information, or to find out how to receive your very own free bottle_/A__BR_

_BR__/FONT_

Or go here: www.pure-all.com_/B__/FONT__/HTML_

--===============0514358024==--

." <[email protected]>

MIME-Version: 1.0

X-Mailer: osCommerce Mailer

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

[email protected]

crash3903 · May 18, 2006

there is a contribution for this - give that a try

regards

mark

philpop · May 18, 2006

thanks,

sounds like alot of files need to be modified.

anyone have the files that are already modified that I could try, as the contribution shows?

thanks

Spam emails- recieving 5000 emails aday, due to Contact_us.php

Recommended Posts

philpop

Link to comment

Share on other sites

philpop

Link to comment

Share on other sites

philpop

Link to comment

Share on other sites

crash3903

Link to comment

Share on other sites

philpop

Link to comment

Share on other sites

Archived

Browse

Activity