Forums

odd email results - CF compromised?

kontech 20 Jan, 2010
Hi, I’m fairly new to CF and using the form built via wizard.
Even though I made email/name required field occasionally we get odd email results submitted though the form.
When someone bypasses the required fields and they’re able to submit the form can I conclude that CF is being compromised?

Here's the link to quotation form
And here’s an example of email results:

Contact Information
Name: TbzWh4 ldhuclqxbrog, nfbqzkcvkccz, [link=http://vqvughxghcaq.com/]vqvughxg
Email: TbzWh4 ldhuclqxbrog, nfbqzkcvkccz, [link=http://vqvughxghcaq.com/]vqvughxg
Contact Tel: TbzWh4 ldhuclqxbrog, nfbqzkcvkccz, [link=http://vqvughxghcaq.com/]vqvughxg
Project Location: TbzWh4 ldhuclqxbrog, nfbqzkcvkccz, [link=http://vqvughxghcaq.com/]vqvughxg
Project Details
Type of installation is needed: {check0}

Type of cabling services are required: {check1}
Type of structure/construction: {check2}
How many cable runs are required? 0-5
Approximate timeframe for project start: qvfWyUPXnU
Can we come out for site survey? Yes
Upload your floor plan, RFP or other documents : {file_20}
Accessories required: {check5}
Additional details and requirements of the cabling project: TbzWh4 ldhuclqxbrog, nfbqzkcvkccz, [link=http://vqvughxghcaq.com/]vqvughxghcaq[/link], http://dvvtkkcksrbd.com/


Submitted by 164.78.248.57
GreyHead 20 Jan, 2010
Hi kontech,

The email field isn't required (just that if there is an entry it's a valid email address).

If the spammer's browser has JavaScript disabled then the client-side validation will not be effective.

If this is a major problem than add an anti-spam link and/or server side validation.

Bob
kontech 20 Jan, 2010
Bob,
Thanks for the prompt response.
I didn't realize that required fields use client-side validation. I know now.
I was refraining from using captcha as it can become a double edge sword.

Matt
GreyHead 20 Jan, 2010
Hi Matt,

The built-in validation is all JavaScript based - that works 99% of the time with 'normal' users.

It easy to add a little serverside validation to check a couple of key fields. See the eaxmple below the server-side validation box.

Bob
This topic is locked and no more replies can be posted.