Empty requests coming from form

Hi everyone, since some days i'm receiving email from my forms that have all the fields (all required, and email with validation script) EMPTY.
Someone could help me?
This is one form url: http://www.daman.it/index.php/tecnologie-distribuite-menu/verdasys-digital-guardian/protezione-file-cad

Thanks,
Lucio Virzi'

Hi Lucio,

You should have some server side validation OR anti spam, like captcha!

Regards,
Max

Hi Lucio,

There's more info in this FAQ

Bob

Hi Lucio,

You should have some server side validation OR anti spam, like captcha!

Regards,
Max

Hi Max, thanks i will try, but i have all fields required, and i use to think that this will be enough to avoid receiving empty emails from the form!

Also thanks to greyhead, but this is not the case, because when i try to send a mail using the form, and filling all the fields, i receive it back in the email.

I think that there is some code injection that permit someone to send me empty mails.

Thanks,
Lucio

Hi Lucio,

From the FAQ

"If ALL your input data are missing then you may have no server validation on your submission data, you should add one or more of the following to your form: Serverside validation (Auto and/or Custom), Captcha, ReCaptcha, Security question. A simple auto server side validation with few "required" fields should be enough, but it will not block spam bots, a Captcha is advised."

Making fields required will do nothing to block spambots :-(

If you are regularly getting empty emails then they are most likely the result of a web-bot or a virus scanner on your hosting that it searching fro and testing all the URLs on your site. Check the IP address and block it.

Bob

Ok! I got it, sorry, i did'nt understand.😉
I think this is due to periodic hosting scanner activity for malware search.
I will try with a captcha!
Thanks again!
Lucio

Hi Lucio,

From the FAQ

"If ALL your input data are missing then you may have no server validation on your submission data, you should add one or more of the following to your form: Serverside validation (Auto and/or Custom), Captcha, ReCaptcha, Security question. A simple auto server side validation with few "required" fields should be enough, but it will not block spam bots, a Captcha is advised."

Making fields required will do nothing to block spambots :-(

If you are regularly getting empty emails then they are most likely the result of a web-bot or a virus scanner on your hosting that it searching fro and testing all the URLs on your site. Check the IP address and block it.

Bob

Hi Bob, thanks a lot, i've tried with a captcha, but today i'm still receiving a lot of empty forms.... it's really confusing me.
Do you have any other hint?
Thanks,
Lucio

Hi Lucio,

Are they all coming from the same block of IP addresses? If so, then blocking the IP addesses may help.

Do you have the Event Loop action set up on the Check Captcha On Fail event?

Bob

Hi Lucio,

Are they all coming from the same block of IP addresses? If so, then blocking the IP addesses may help.

Do you have the Event Loop action set up on the Check Captcha On Fail event?

Bob

Hi Bob, good morning!
I had an Event Loop action for the fail on captcha, but was not assigned to the right event.
Now is locked to the fail event of the captcha.
I have a list of requests from the same address, then, after days, another list from another address, and so on.
Thanks,
Lucio

Hi Lucio,

Just for clarity, the Check Captcha On Fail Event Loop should normally point back to the On Load event of the form.

I think I would also add a list of IP addresses to block, it's easy enough to add a new one if you see it change.

Bob