Bots getting by my Captcha???

It sounds like someone is submitting directly to the file that sends the email.

What you need to do is make sure the file that sends email is protected by the CAPTCHA so that if someone submits directly to the file it doesn't process the code that sends the email.

I bet that was it.  I put that block of code in my sendmail.asp on my main site, and we'll see if I get any more.  I'll let you know!

I do not remember seeing that one needs to insert that line of code in the installation instructions, but unfortunately, it would not be the first time I thought I was following directions and missed something!

My spam has started to increase.  Recently it has increased exponentially.  Yesterday I received 150 spam emails and today I received 175 spam emails.  All apparently from the same person/bot all apparently trying to post links.

I notice some anomalies in the headers that exist in the valid vs. the spam emails.

Valid email headers look like this:

CAPTCHA_Postback: true
FirstName: Bob
LastName: Smith
Submit: Form Submission
comments: Blah, Blah, Blah
email:persons name@gmail.com
securityCode: 87PF3
submit: submit

------------------------------
FirstName: Kir
LastName: Arnie
SubmitCase: Form Submission
comments:(a bunch of link spam appears here)
email: various bogus names@various bogus email addresses.com
submit: submit

------------------------------Of particular interest is that:

1.  the "CAPTCHA_Postback: true" statement is missing from all the spam

2.  valid emails come in showing: "Submit: Form Submission" while spams all say "SubmitCase: Form Submission"

3. the "securityCode:" message and number are missing from all the spams.

I must be doing something wrong, can you help me figure out how to fix this?

Thanks in advance!

rkeener2

OK, I'll give it a try.  I'm kinda a noob with all this, so please forgive the following noob sounding questions.

Funny thing is I have not received any spams attempts today. <scratches head>

I received hundreds of them the last few days and the only change I made was to change all my ftp and hosting passwords and now they have stopped (though I do seem to recall receiving some spam yesterday after I changed my passwords). At the risk of sounding like I'm stating the obvious, Is one connected to the other or is this merely a coincidence?

Also,I was doing some research on the web and reading about server side validation vs. client side validation and how, without server side validation, some asp codes can be "tricked" to send a form without validation.

Could that have been happening with my site with the code I was using? (I assume Web Wiz has both server and client side validation.

Thanks again for the previous quick response!


Edited by rkeener2 - 16 February 2009 at 2:56pm