8 replies · opened May 13, 2019
Hello,
Since I uploaded the contact page/form about 10 days ago, I'm receiving everyday 2 or 3 messages from the contact form (Viagra, Cialis, Levitra, Stendra, etc). I've my form up and running with recaptcha so, what could be the cause of this issue?
Those kind of messages are obviously SPAM so, is this contact form script secure?
Thank you!
In case you need it:
https://mundoregio.com/contacto/
and the full headers
Delivered-To: jesus.delagarza@gmail.com
Received: by 2002:a5d:9057:0:0:0:0:0 with SMTP id v23csp1713638ioq;
Sun, 12 May 2019 09:58:49 -0700 (PDT)
X-Google-Smtp-Source: APXvYqxC2EB5uV5EAO7mxkmI3NGb+0tuAN34ViFxS5jMTxLDbOtFjpXgc6OCWXloKGYBZpPVwVXF
X-Received: by 2002:ac8:875:: with SMTP id x50mr19390248qth.345.1557680329906;
Sun, 12 May 2019 09:58:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1557680329; cv=none;
d=google.com; s=arc-20160816;
b=doAVzK9W/5px+2oPzHhR/S/34JCoz65usDUo+Puf+qJVElAmiy+O2doPPMDfJywNYb
ZQ6JrJGXdAxhboRRpch3aX1XH+pP7xCLmqO4CQ7/ixKMasZzwWuv/UQpYGGLufKOf7YM
U9+L89jZQhlDtm0gamOikKGQtbYf+tRGn3ddOKy7WNeZfITsBJV8cPFUwhUyhbtVjZrR
Ro3/s+BS51/C9KHQLBVEsU/wK9PuK5zkSU1pncZbnJWxB0P9oQNYLzLSM2/4yJGXUW7a
54DFwKtj4ZKfZADgLA+K+Vdh+dy69rXDi7Hla+9Fl3i6yA4Sgfh7KTEMx/sGGE4jHLHL
/sZg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:mime-version:message-id:from:date:subject
:to:dkim-signature;
bh=Ra4qJXl3HOClFTY1kvAvab3Ta3h5Kx812cXGxd0vyGU=;
b=De+HueBBYU3i/gAa8YhzKJ3aHHMvGJKR7qtabDXBKBeiHlliWguhtQuva3tF5+SZ4s
ZdFDBtH+SbRR+/RihE15mTDWHUypz/nhfvVWAZXe9YgcQCASlzHVmO57hovLek614B0p
UOALPyFDh9ptOtBs0SzVslzkVzBmTxJWGn6KLTIyRfUcTajNY5pHb1gaHmqprkpQp6Uh
RVMtkiMaXYN3bez4AocQKj7HWij06KtX7/9MKp2/FZuqX4NlBjdsSviHsgNJUKaLmPm8
C6iuVQdRBLD7WSsLGxO3SbN27JEigzdMQpD6O6HR34iUtR6dH6npQByUY6WGADgY2uNv
yuGg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@mundoregio.com header.s=default header.b=QYtbLmaT;
spf=softfail (google.com: domain of transitioning no-reply@mundoregio.com does not designate 54.39.132.107 as permitted sender) smtp.mailfrom=no-reply@mundoregio.com
Return-Path:
Received: from sv1 (ns564921.ip-54-39-132.net. [54.39.132.107])
by mx.google.com with ESMTPS id i12si679624qke.50.2019.05.12.09.58.48
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 12 May 2019 09:58:49 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning no-reply@mundoregio.com does not designate 54.39.132.107 as permitted sender) client-ip=54.39.132.107;
Authentication-Results: mx.google.com;
dkim=pass header.i=@mundoregio.com header.s=default header.b=QYtbLmaT;
spf=softfail (google.com: domain of transitioning no-reply@mundoregio.com does not designate 54.39.132.107 as permitted sender) smtp.mailfrom=no-reply@mundoregio.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mundoregio.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=Ra4qJXl3HOClFTY1kvAvab3Ta3h5Kx812cXGxd0vyGU=; b=QYtbLmaTbHSrffebRAaN6kGxF/ XGQiF5VYxYu5nr340NAmtuz5jHNh68evortwbMhHNKfwUSE40gdlyMKTvhCPZWXOUJgt3Ro6ZbPwe qNSgq7xnEUe4WYdqmQSipHJm7MXVDs5V8SCq56Mzq9LSovnr5T0LrPORwNwipP+4jaqqF/yzbvF1M GnUv2mRiJM5XZF4Xb5RDM51xovac8o+QTsmJPubj/0GknnOsds9Va7kQ6BXKOfTykMuW6YhuazdoT 1/Id8ks9FzSxO26pSOgUzLSak3pUwi6zoicBsZXBPEGKmI/TnpagV2ifEOS7NKL99mO9EqZXM/u1m juAWEHNw==;
Received: from mundoregio by sv1 with local (Exim 4.91) (envelope-from ) id 1hProF-0004Be-W0 for informes@mundoregio.com; Sun, 12 May 2019 12:58:48 -0400
To: "Webmaster Mundoregio.com"
Subject: generic viagra https://discountshippteam.com/
X-PHP-Script: mundoregio.com/include/form.php for 67.243.105.133, 162.158.63.118
X-PHP-Originating-Script: 1001:PHPMailer.php
Date: Sun, 12 May 2019 16:58:47 +0000
From: "Webmaster Mundoregio.com"
Message-ID:
X-Mailer: PHPMailer 6.0.7 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_pDzMQVkYZmU9XzRs2Ng7QB7darLirzozUEvQWPi6f8"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - sv1
X-AntiAbuse: Original Domain - mundoregio.com
X-AntiAbuse: Originator/Caller UID/GID - [1001 992] / [47 12]
X-AntiAbuse: Sender Address Domain - mundoregio.com
X-Get-Message-Sender-Via: sv1: authenticated_id: mundoregio/from_h
X-Authenticated-Sender: sv1: no-reply@mundoregio.com
X-Source:
X-Source-Args: php-fpm: pool mundoregio_com
X-Source-Dir: mundoregio.com:/public_html/include
--b1_pDzMQVkYZmU9XzRs2Ng7QB7darLirzozUEvQWPi6f8
Content-Type: text/plain; charset=us-ascii
Form ResponseHello,
We absolutely understand your concerns regarding this, however, the issue is that these Forms are filled up by Real People who send out SPAM and not Bots (our Forms Processors are designed to protect against Bot SPAMs), which is why the reCaptchas are also passed. As a result, the Form Responses are successfully delivered.
An extra layer of protection is required to filter out words that you want to block when sending out Form Responses to your Emails. We are working on an Update for this and will send you a Notification once it is available. Thanks for your Patience.
Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.
Thank you!
I understand, and how long until you have this update?
Hello,
We have been working on it today and ready for some testing. We can provide you with an early access, so simply use this File: https://www.dropbox.com/s/nk4fhz2hc0dmh9p/form.php?dl=1 and edit the $spam_keywords Array to add the words you want to block.
If the words are found in any Field on your Form, the Processing will be stopped and the response will not be sent. However, it will still show a Successful Message to the User so that they don't know what is going on behind the hood which will prevent them from finding another way of sending SPAM.
Hope this Helps!
Let us know if we can help you with anything else or if you find any further issues.
Thank you!
I just made a quick test and it seems it worked. Will keep an eye on this so I'll start including SPAM keywords that will prevent to get more SPAM emails.
Thank you again!
Hello,
Thats Great! :)
Do let us know if we can help you with anything else or if you find any further issues with Canvas.
So far so good.
Its there an option to stop emails in another language? as going word by word on Russian emails will be hard to accomplish and today I received the 1st one un Russian.
This may apply as well for Arabic and/or Chinese emails (I still don't receive any in arabic and/or Chinese) but eventually will happen. English and Spanish are more common for me.
Thanks!
Hello,
Unfortunately, not! The possibilities of SPAM are limitless but unfortunately, these are unavoidable considering the complexities. We will surely do more research and try implementing them in the Future Versions of the Forms Processor.
Hope this Helps!
Let us know if we can help you with anything else or if you find any further issues.
Have the same question, or something new?
Sign in to the Canvas dashboard to reply or open your own topic. Canvas owners get direct help from the SemiColonWeb team.
Reply on the dashboard