Support Forums

frommarcq · 05-02-2006, 11:08 AM

May be i'm a paranoid... But two months ago, my web site (not 68Classifieds) has been the victim of a 'header injection' attack. The spammers try to find a safety vulnerability in the mail() function. All my scripts are now double-protected : first with an automatic check of the used characters ('/n' ou 'bcc' are for example forbidden, because if allowed they can place a 'bcc' address in the text, and receive a copy of the sent mail), second with the Freecap capcha.
According to me, the 'contact us' form isn't safety enough. Is it possible to place the 'captcha' option for contactus.php ?

Thanks in advance !

Pascal

frommarcq · 05-09-2006, 05:47 AM

I found in contactus.tpl.php that the captcha code was included.
But in contactus.php, nothing about it >> captcha present but not activable.
I think it's a forgot and report this bug.

Pascal

***Eric Barnes*** · 05-09-2006, 09:11 AM

Yea it could have been left out. I will try and get this added to the next release.

05-02-2006, 11:08 AM	#1
frommarcq Senior Member Join Date: Mar 2006 Location: Lille (France) Posts: 120 Rep Power: 15	captcha for contactus.php May be i'm a paranoid... But two months ago, my web site (not 68Classifieds) has been the victim of a 'header injection' attack. The spammers try to find a safety vulnerability in the mail() function. All my scripts are now double-protected : first with an automatic check of the used characters ('/n' ou 'bcc' are for example forbidden, because if allowed they can place a 'bcc' address in the text, and receive a copy of the sent mail), second with the Freecap capcha. According to me, the 'contact us' form isn't safety enough. Is it possible to place the 'captcha' option for contactus.php ? Thanks in advance ! Pascal __________________ 68classifieds (V4.0.9Developer)

05-09-2006, 05:47 AM	#2
frommarcq Senior Member Join Date: Mar 2006 Location: Lille (France) Posts: 120 Rep Power: 15	More infos... I found in contactus.tpl.php that the captcha code was included. But in contactus.php, nothing about it >> captcha present but not activable. I think it's a forgot and report this bug. Pascal __________________ 68classifieds (V4.0.9Developer)

05-09-2006, 09:11 AM	#3
*Eric Barnes* 68 Classifieds Staff Join Date: Mar 2006 Location: Belmont, NC Posts: 4,760 Rep Power: 110	Yea it could have been left out. I will try and get this added to the next release. __________________ Eric Barnes 68 Classifieds Developer Please do not send me a private message asking for support. Instead use these open forums or our ticket system. Customer Area \| Issue Tracker \| Documentation \| 68C Mods \| Submit a Ticket \| 68 @ Twitter \| My Modules

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Check Your Captcha Word List!	bgordon	v3.1 Questions & Support	6	04-16-2007 05:56 PM
Problem with Freecap Captcha in v3.1.5b	Syssh	v3.1 Questions & Support	7	12-12-2006 05:11 PM
Removing unwanted words from captcha feature	Blair	v3.1 Questions & Support	1	11-09-2006 05:57 PM