Chronoforms hacked?

Hello,

On my website I'm using Chronoforms for a contactform. It's worked very well for almost a year now, but since a few weeks I'm recieving a lot of spam.

In a maximum of 24 hours, I receive 5000+ e-mails. The subjects/messages are exactly the same in each e-mail, but every e-mail is send with a different name, address and e-mailaddress. All of the e-mailaddresses end with: @mijnpostcode.nl. I'm guessing this is spam, coming from some kind of bot, but I've already built in the captcha/recaptcha. So is there anything I can do for spam prevention?

I'm looking forward to your reactions. Thank you in advance.

Kind regards, Kristie

Hi Kristie,

Wow, that is a lot. I'd use a custom Serverside validation action to reject those messages with a matching subject.

Please see this FAQ which has code for blocking IP addresses but can easily be adapted to check the subject value.

Bob

Hello Bob,

Thank you for your response.

The problem is, that I use this form also for a competition/giveaway. So matching subjects aren't always spam. Because I'll have the answer of the question set as a subject for the e-mail.
Isn't there another way to go against spam?

Hi krisjuh22,

You said that the subjects are the same in all the spam emails; so match that subject.

Or, match the email domain. Either will work, you just need to find something that lets you identify and filter out the spam messages.

Bob