PHPfox-Official / phpfox-v4-feature-requests

phpFox Feature Request Tracker https://phpfox.com
6 stars 12 forks source link

Better anti-spam measures on the contact page #1020

Open daniol opened 2 years ago

daniol commented 2 years ago

We currently receive about 15 spam emails each day coming from the contact page. The captcha (recaptcha) is activated, but it does not help.

Can you please implement following measures?

1) Disallow sending the form, if the setting "Allow html in contact form" is off and they write html code (check if certain tags like <a>, <img>, etc. are present)

2) Change input names each time, randomized. For example, instead of <input name="val[subject]" ..., define the name as <input name="val[random_field_hduzeg67123t8t5783dh8193612]" ...

3) Define random honeypot form fields that are hidden. If they are not empty, discard the submission.

4) Other possible measures against spam submissions like content inspection and scoring (consider Akismet).