Getting strange emails

[snights]

Started getting strange emails with what appers to be scramble html

C9mt4z a hrefhttp:ppkizndukdzx.comppkizndukdzxa urlhttp:asoptdxujcnt.comasoptdxujcnturl linkhttp:ispoevtwrjbg.comispoevtwrjbglink http:tanxlamyorme.com

 

is one of all..

I belive its a try for inserting some script? correct? i want to belive that the reason im getting this email is becuse im using security pro?

 

Or is it sometinge else? im a beeing paranoid?

[MyR]

Started getting strange emails with what appers to be scramble html

 

Looks to me like sanitized html from your contact_us page. Nothing to worry about.

 

You may consider adding captcha to your contact_us page.

[spooks]

looks like a spam attack that's been cleaned so no worries. you must be cleaning the post with something, contact_us uses the post method & security pro has no effect on that

 

 

You can prevent these spammers getting anywhere with this type of attack with this change to contact_us that will detect any links in the message.

 

at the very start, after

 

 

  Released under the GNU General Public License
*/

 

add:

$error = false;
 if (preg_match('/(http:\/\/)/i',$_POST['enquiry']) || preg_match('/(<a.*href.*=)/i',$_POST['enquiry'])) {
 $error = true;
 $messageStack->add('contact', 'Links are not allowed within the message,<br />please just put www part if needed.');
}

 

 

then remove the later:

 

$error = false;

 

 

Generally if the spammers can't send live links they just give up, as it makes their spam pointless.

[mhsuffolk]

I have added spooks code to my shop.

 

On testing a "clean" email goes through as normal but if I put a hyperlink into the email it goes to a blank page with http://www.xxxxxxxxx...php?action=send in the URL bar of the browser.

 

Is this correct please

 

Martin

[spooks]

 

Is this correct please

 

Martin

 

 

Oops, sorry, there is an error in the code , its a snippit I used on a non-osC site, it needs a small change for osC

 

remove the line added b4:

 

   $messageStack->add('contact', 'Links are not allowed within the message,<br />please just put www part if needed.');

 

 

then after:

 require('includes/application_top.php');

 

add:

 

 if ($error) $messageStack->add('contact', 'Links are not allowed within the message,<br />please just put www part if needed.'); 

[cellcom]

This has no effect what so ever.I tried the code and then put http://www.google.com into the form and it passed.Any ideas ?