jasqueen

Someone (I assume here) sent a test email, which I got, with the name “test test” and an email address of “test @test.com” and a message of “test” so I’m assuming you can see that the form required you to input those categories in order to submit the “contact us” form, which is how it works with actual people who contact me. But I also just got another email from “Thomas Vance” with an email address of “Thomas Vance [[email protected]]” and no message.

I thought maybe it had to do with the browser they use, but I tried it in Chrome, Firefox, and IE, and all required me to put in an email address and a message.

What I found out that was very interesting: by going to “submissions” and looking up the IP addresses of dozens of these entries, the majority come from the same two ISP and Organizations:
B2 NetSolutions or
ColoCrossing

Does that help?

Haha, ok, I figured out how to take a screenshot, but how do I share it here? FYI, when I navigate to my “contact us” form and submit my own name, everything works as it should! I, as admin, get notified, I, as “submitter” get a thank you message ON the screen as well as in an email…it all works. I can’t figure out how these 10 people were able to bypass it unless it’s some kind of scammy spammy thing.

IT WORKED! (I’m sure that doesn’t surprise you, but it delights me!) Thank you so much. All my noodling around looking for explanations was leading me nowhere.

I’m comfortable making most changes to my website, but coding sort of intimidates me. Again, thank you.