Contact Us Page

I have something weird happening with my Contact Us Page.

Yesterday, I screwed the page up. In fact, as of right now its not loading and none of the input boxes even exist. How am I getting this spam from a non-existent page??? I tweaked the email subject line so I could verify that it is the source of the email. http://radiant-holidays.com/radiant_holidays/index.php?main_page=contact_us shows an empty Contact Us page. I know what to fix and how to fix the error. However, I am getting emails from the contact us page.

I realize that I am using an older version of ZC and I am not 100% sold on using a Contact page as I use a third party spam filter that it is very good but will NOT catch spam from the Contact Us page. I am on the fence about changing everything to a base email address and dropping the Contact page.

scratching my head on this one.

ah...and I see this spammer online and the page is ***index.php?main_page=contact_us&action=success. Does this means he is bypassing the input page and feeding the data directly into the system?

I fixed my mistake so the contact us page is back up. I did go and change the name of the honeypot to something different in case the spammer is using some automated "copy" of the submission (how I would have no idea but I never see them on the page...just the contact us "success" page). I sent myself a test email as a maker in my inbox. So from here on out, I can see what spam/advertising I get.

Were receiving (and probably still will) spam through the contact us page because you still have the code for the contact us in the mega menu though it is hidden by css and it does not have the honey pot applied to it...

mc12345678:

Were receiving (and probably still will) spam through the contact us page because you still have the code for the contact us in the mega menu though it is hidden by css and it does not have the honey pot applied to it...

I will look into that but I have disabled the mega menu Contact Us. I do appear to have live people going to the contact page and sending spam as I just literally watched it happen from two different IPs. I really do not understand what they think they can gain by this effort! My third party spam filter does not filter emails from the source account so all this spammy mess comes through.

g2ktcf:

I will look into that but I have disabled the mega menu Contact Us. I do appear to have live people going to the contact page and sending spam as I just literally watched it happen from two different IPs. I really do not understand what they think they can gain by this effort! My third party spam filter does not filter emails from the source account so all this spammy mess comes through.

No, the mega menu contact us is not disabled. Goto a page other than the contact us page. Right click and view the page source (or press F12 on a pc). Search for contact_us. Besides the link to actually go to the contact_us page you will see code looking for items to be filled as a part of the contact us page...

It is hidden with CSS, and the kiddies and spammers don't care about css...

Once they "click" the submt button, everything process as if it was sent from the actual contact us page. The absence of a honey pot is one thing that allows it to go automatically (as never "sucked" into the trap).

Interestingly enough...the honeypot field is in the Mega-Menu form as found in /includes/templates/abbington_mega/common/tpl_mega_menu.php on line 286. Not sure if this is new or not. From what I can see, the processing of that contact us form is the same as the regular contact us by looking at the page source data.

Frankly, I do not think I have an issue with bots doing this...I really believe I have real people typing the forms OR a copy of the form data being submitted automatically.

g2ktcf:

Interestingly enough...the honeypot field is in the Mega-Menu form as found in /includes/templates/abbington_mega/common/tpl_mega_menu.php on line 286. Not sure if this is new or not. From what I can see, the processing of that contact us form is the same as the regular contact us by looking at the page source data.

Frankly, I do not think I have an issue with bots doing this...I really believe I have real people typing the forms OR a copy of the form data being submitted automatically.

The addition of the honey pot to the mega-menu is a new addition... I went back and looked closer and based on one of the posts above, realized that a honey pot is there. There shouldn't be any way to submit the form data automatically because of other checks that must pass.

What are the filenames of the files in: includes/modules/pages/contact_us?

mc12345678:

The addition of the honey pot to the mega-menu is a new addition... I went back and looked closer and based on one of the posts above, realized that a honey pot is there. There shouldn't be any way to submit the form data automatically because of other checks that must pass.

What are the filenames of the files in: includes/modules/pages/contact_us?

Just header_php.php and on_load_main.js

g2ktcf:

Just header_php.php and on_load_main.js

Sorry, still on a mobiile: the honey pots match all around? In your case there should be at least three locations (files) that have the same text...