Announcement

Collapse
No announcement yet.

Defeating Spam with Mail Form?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • WizyWyg
    replied
    Originally posted by ShiningArcanine
    That is what I suggested. The email encoder encodes anything into its equivalent decimal entity.

    It can be decoded by a spam bot (since the browser can read it) but the chances of a spam bot being that intelligent are at least 0.01%.

    My suggestion of the other things were to create a layered shield (although I only get spam when a spammer guesses my email) against spam like I have on my site.
    Though, that is for people who run Apache, and they would have to do that in an htaccess.

    How about those who dont run Apache ( ie IIS ?)

    Leave a comment:


  • ShiningArcanine
    replied
    Originally posted by WizyWyg
    Or you could just use a simple HTML hash (for example):
    PHP Code:
    <a href="mailto:me@privacy.net?Subject=Hello">Test</a
    For example. I've been using this since 1998 on my pages on my personal site, and not once has it been "lifted" by a spambot. The only "spam" i ever got on the address I use, was due to a dictionary attack, and I never received another spam again. And its a fairly "easily" spammable type email address.
    That is what I suggested. The email encoder encodes anything into its equivalent decimal entity.

    It can be decoded by a spam bot (since the browser can read it) but the chances of a spam bot being that intelligent are at least 0.01%.

    My suggestion of the other things were to create a layered shield (although I only get spam when a spammer guesses my email) against spam like I have on my site.

    Leave a comment:


  • DirectPixel
    replied
    *cough* /me kicks the vbCode parser

    Leave a comment:


  • WizyWyg
    replied
    hehe, yeah , it can muck up some important things sometimes

    edit: hmm odd, I thought I was replying to somene when i wrote this,
    but also wanted to add that I currently use this method on my company's website, since we had to change our support email address due the amt of spam were getting; we haven't received one spam message yet and its been up with the new email address since late June.

    Record of getting spam to an Email address I own:

    40 minutes after using it unmunged in a newsgroup.
    Last edited by WizyWyg; Thu 31st Jul '03, 7:40pm.

    Leave a comment:


  • WizyWyg
    replied
    Or you could just use a simple HTML hash (for example):
    PHP Code:
    <a href="mailto:me@privacy.net?Subject=Hello">&#84;est</a> 
    For example. I've been using this since 1998 on my pages on my personal site, and not once has it been "lifted" by a spambot. The only "spam" i ever got on the address I use, was due to a dictionary attack, and I never received another spam again. And its a fairly "easily" spammable type email address.
    Last edited by WizyWyg; Thu 31st Jul '03, 7:36pm.

    Leave a comment:


  • ShiningArcanine
    replied
    First, save the spam emails. Second, (you don't have to but it will get you off the spam lists) change your email addresses (preferably the domain). Then encode all email addresses viewable via the internet with this:

    http://www.wbwip.com/wbw/emailencoder.html

    Next if you run Apache, put this in an .htaccess in the public root (or above it if Apache will see it):

    RewriteCond %{REQUEST_FILENAME} (html|php)?$
    RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]
    RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Crescent [OR]
    RewriteCond %{HTTP_USER_AGENT} ^CherryPicker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.* [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Telesoft [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mozilla/3.Mozilla/2.01 [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EmailCollector
    RewriteRule ^.*$ /spam.html [R]
    Setup a spam program on the server like Spam Assassin. Then install Spamunition (upserve.com, a little buggy but it works) on each of the PCs in your company. Finally, train Spamunition with the spam you saved (don't delete it after training it since you will need it to retrain it in the future if needbe).

    Now you should have virtually an exact copy of PokemonFanUniverse.com's antispam defense system. ^_^

    Leave a comment:


  • merk
    replied
    Originally posted by Me2Be
    In order to try and combat our massive spam problem in our company (about 35,000 spam a day between all of our accounts), I want to remove our email addresses from our site and replace them with a form they can fill out for correspondence.

    The only problem is most of the email mailto forms I can find have the email address embedded on the HTML page and can still be caught if something searches for it. Does anyone know of any forms I can use that do not have the email address on the html page itself, but perhaps somewhere in the script on the server?
    It does suck when you get lots of spam like that. Youll never be able to remove your emails from the listings anymore, though. Theres a list out there now with your companies email addresses, though you can stop it from getting increased with email harvesters.

    Have you tried using spam filters?

    Leave a comment:


  • CeleronXT
    replied
    Originally posted by Lacrosse Boy
    This is a useful script that displays a link to your e-mail address but stops spam engines from grabbing your e-mail address for spammage use. It is useful if you do not want to have a form.

    Code:
       <script type="text/javascript">
    user = "username";
    site = "websitename";
    document.write('<a href=\"mailto:' + user + '@' + site + '?subject=Your site' + '\">');
    document.write('Webmaster' + '</a>');
    </script>
    The problem you might have with that, though, is that it won't work for people with JavaScript off.

    Leave a comment:


  • filburt1
    replied
    If you still want to show the address itself, use an image--which spambots can't read.

    Leave a comment:


  • Chris M
    replied
    Lacrosse Boy's suggestion seems to be the best without the use of PHP or other complex languages

    Satan

    Leave a comment:


  • Me2Be
    replied
    Originally posted by Freddie
    You could also modify the vB3 Contact Us form (click on 'Contact Us' below).
    Actually, this isn't for my Vb -- it's for my general sites

    Leave a comment:


  • Freddie Bingham
    replied
    You could also modify the vB3 Contact Us form (click on 'Contact Us' below).

    Leave a comment:


  • Me2Be
    replied
    Wow, thank you!!! This is exactly what I've been looking for -- these options are great

    Leave a comment:


  • Lacrosse Boy
    replied
    This is a useful script that displays a link to your e-mail address but stops spam engines from grabbing your e-mail address for spammage use. It is useful if you do not want to have a form.

    Code:
       <script type="text/javascript">
    user = "username";
    site = "websitename";
    document.write('<a href=\"mailto:' + user + '@' + site + '?subject=Your site' + '\">');
    document.write('Webmaster' + '</a>');
    </script>

    Leave a comment:


  • Chen
    replied
    http://www.email-form.com/online-demo.html
    Seems like a pretty nice program. You can probably find hundreds of "mail forms" at Hotscripts.com too, most would be for free, but this one stood out... if you don't need all the advanced features, you'd be better off just choosing something from here:
    http://www.hotscripts.com/cgi-bin/se...l+form&catid=2

    Leave a comment:

widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X