• Resolved jasqueen

    (@jasqueen)


    I have the contact form set up to require a name, an email address, and a brief message. If I myself try to submit just a name on the form, it won’t submit, which is what should happen. HOWEVER! Every week, I get emails from people with just a first and last name, no email address, and no message, so I can’t respond to them. In the last month, I’ve gotten 10 of these, all formatted the same, but with different names, obviously. How is this happening? Here’s the info from the latest one:

    The email address shows as: Richard Bower [[email protected]]
    The subject line shows as: Contact Us Form Submission
    the body of the email shows as: Name: Richard Bower

    • This topic was modified 6 years, 7 months ago by jasqueen.

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi,

    Please navifate to Form Options > Email Options and take a screenshot. We would like to have a closer look at it.

    Thank you and have a nice day!

    Thread Starter jasqueen

    (@jasqueen)

    Haha, ok, I figured out how to take a screenshot, but how do I share it here? FYI, when I navigate to my “contact us” form and submit my own name, everything works as it should! I, as admin, get notified, I, as “submitter” get a thank you message ON the screen as well as in an email…it all works. I can’t figure out how these 10 people were able to bypass it unless it’s some kind of scammy spammy thing.

    Thread Starter jasqueen

    (@jasqueen)

    Someone (I assume here) sent a test email, which I got, with the name “test test” and an email address of “test @test.com” and a message of “test” so I’m assuming you can see that the form required you to input those categories in order to submit the “contact us” form, which is how it works with actual people who contact me. But I also just got another email from “Thomas Vance” with an email address of “Thomas Vance [[email protected]]” and no message.

    I thought maybe it had to do with the browser they use, but I tried it in Chrome, Firefox, and IE, and all required me to put in an email address and a message.

    What I found out that was very interesting: by going to “submissions” and looking up the IP addresses of dozens of these entries, the majority come from the same two ISP and Organizations:
    B2 NetSolutions or
    ColoCrossing

    Does that help?

    Hi,

    We want to inform you that the test email has been sent by our team to check whether the form is being successfully submitted or not.

    Please, try to add a hidden input field to your form.

    Afterwards, in the file form-maker/frontend/models/form_maker.php find

    if ( $row->sendemail )

    You will see 3 copies of this scrypt, find the second one and add the following

    if(isset($_POST["spamhidden"]) && trim($_POST["spamhidden"]) != "") { return false; }

    Here the {{spamhidden}} is the name of the hidden field.

    But in any case, please block all IP addresses, from which you have received spam submissions in Form Maker?Blocked IPs.

    Thank you and have a nice day!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Sending submissions without email address’ is closed to new replies.