Link checker | Validators, tests and check web links | Scripts PHP

Resources web Quinti.net

- Scripts PHP

- Secure Contact Form Antispam with CAPTCHA V.1.2

I have been attacked thousand of times by spammers via my contact form, they use robots and take advantage of certain vulnerabilities of the mail forms to send their spam, and fill up my mailbox to such an extent that they render my mail practically useless.
There are two ways of tackling this problem: Introducing a CAPTCHA validated through JavaScript, which I will explain later.
Or introducing certain functions in PHP that prevent these attacks, as you can see in the examples below
In the first instance, examine the problem:

-Related links - Information:

CAPTCHA (Spanish) - http://es.wikipedia.org/wiki/Captcha
Problem description (English) -http://www.modwest.com/help/kb9-314.html
More problem descriptions (English) - http://www.anders.com/cms/75/Crack.Attempt/Spam.Relay

Solution:

I have adapted a great CAPTCHA script for validation in JavaScript of: http://www.archreality.com/jcap/#j1

First let us have a look at the form code in PHP, which consists of two files, contacto.php and gracias.php:

contacto.php:

// QUINTI.NET SECURE FORM VERSION 1.0 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" > <head> <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=iso-8859-1" /> <meta name="keywords" content="" /> <meta name="description" content="" /> <link rel="shortcut icon" href="image.gif" type="image/x-icon" /> <title>Quinti.net - Contact form example web secure anti spam with captcha</title> //U NEED A PHP SERVER. //START REQUIRED IN HEAD <? // Quinti.net - Secure Contact Form Antispam with CAPTCHA v1.0 // Created by Jesus Quintana // http://www.quinti.net // Visit site for help and new versions echo "<script type=\"text/javascript\">\n"; echo "\n"; echo "</script>\n"; ?> <script type="text/javascript" src="md5.js"></script> <script type="text/javascript" src="jcap.js"></script> //END REQUIRED IN HEAD <style type="text/css">  </style> </head> <body> //START REQUIRED IN BODY <form method="post" onsubmit="return validar(this)" id="form1" action="gracias.php"> <p> <input type="hidden" name="token" value="<?=$token?>" /> </p> <p> Nombre:*<input name="name" type="text" value="" /> </p> <p> E-mail:* <input name="email" type="text" value="" /> </p> <p> Asunto: <input name="phone" type="text" value="" /> </p> <p> Mensaje:* <br /> <textarea name="message" cols="30" rows="5"></textarea> </p> <p> Insert the image code* (to prevent spam)</p> <p><input type="text" name="uword" id="uword" value="" /> </p> <p><script type="text/javascript">cimg()</script> </p> <p> <input type="submit" value="enviar" /> </p> </form> <p>fields with * are obligatory. <a href="http://www.quinti.net" title="www.quinti.net - diseño web y multimedia"><img src="http://www.quinti.net/pics/q.png" width="21" height="14" alt="diseño web y multimedia" /></a></p> //END REQUIRED IN BODY <p> <a href="http://validator.w3.org/check?uri=referer"><img src="http://www.w3.org/Icons/valid-xhtml11" alt="Valid XHTML 1.1" height="31" width="88" /></a> </p> </body> </html>

OK, we see that in the <head> we write in php the field validator in JavaScript.
And also we include 2 .js exernal files, property of http://www.archreality.com/jcap/#j1
In which I have modified a function.

Now let us have a look at the processor form, called gracias.php:

// QUINTI.NET SECURE FORM VERSION 1.0 //START REQUIRED CODE <? // Quinti.net - Secure Contact Form Antispam with CAPTCHA v1.0 // Created by Jesus Quintana // http://www.quinti.net // Visit site for help and new versions @import_request_variables("gpc");//import variables $youremail = "tudireccion@dominio.net "; //your mail $subject = "el título del tema "; // for example, title of your contact page page - contact $redirect = "contacto.php";//url to be redirected when contact form is sent $secs = "5";// time in seconds will be redirected if(eregi("MIME-Version:",$postVars)) { mail("tudireccion@dominio.net", "Form Hijack Attempt", "A spam relay was attempted from the Web site and was blocked.", "From:SpamMonitor"); die(); } //block spam $secret = 'ssshhitsasecret'; $token = md5(rand(1, 1000).$secret); $_SESSION['token'] = $token; ?> //END REQUIRED CODE <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="es" > <head> <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=iso-8859-1" /> <title> Thank you, processor example anti spam with captcha by quinti.net, correct process</title> //START REQUIRED META <meta http-equiv="refresh" content="<?=$secs;?>;URL=<?=$redirect;?>" /> //END REQUIRED META </head> <body> //START REQUIRED IN BODY <? // variables to stop spammers $name = stripslashes($name); $message = stripslashes($message); $headers .= "From: " . $email . "\r\n\r\n"; //This is where the email is sent using your values from above. Be sure to update this if you change any fields in contact.php mail("$youremail", "$subject"," Name: $name Email: $email Phone: $phone Message: $message ",$headers); // Strip \r and \n from the email address $_POST['email'] = preg_replace("\r", "", $_POST['email']); $_POST['email'] = preg_replace("\n", "", $_POST['email']); $_SESSION['token'] = $token; $token = md5(rand(1, 1000).$secret); $secret = 'ssshhitsasecret'; $field = preg_replace( "/[\n\r]+/", " ", $field ); // Remove injected headers $find = array("/bcc\:/i","/Content\-Type\:/i","/cc\:/i","/to\:/i"); $_POST['email'] = preg_replace($find, "", $_POST['email']); $message = preg_replace($find, "", message); $email=str_replace("\r","\n",$email); $name=str_replace("\r","\n",$name); $message=str_replace("\r","\n",$message); $phone=str_replace("\r","\n",$phone); if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $email)) { ob_clean(); mail("$youremail", "Message Killed", "$message", "From: $name <$email>"); exit("Message killed."); } if (eregi('^(bcc$|content-type|mime-version|--)',$key)) print_error("Field names indicate exploit."); //bloqueo de spam ?> <p>Thank you, the contact form was sent correctly. In 5 seconds you will be redirected to index page.</p> //END REQUIRED IN BODY </body> </html>

- see example without styles
- see example with styles

- Description:

Invulnerable secure antispam contact form,
JavaScript field validator in php (to insert multi-language variables and other variables, if you wish)
Prevent spammers from using your form to send garbage, guaranteed.
CAPTCHA to avoid Javascript validated Spam, (Note: If JS is disabled, call PHP validation)
Show user info: Browser, IP, data and referral
Easy to install and configure
Valid XHTML 1.1

- IMPORTANT NOTICE: to remove the link of the creator and/or to use the form commercially, the form is 30€, ($35.37), more info under Contact

- Download the full file descargar formulario seguro antispam captcha script php

(quinti.net_form+jcap.rar)

(942 Kb.) - downloaded: 21617 times.

If you have doubts or questions about installation, in Forum and/or in Contact

ChangeLog, see in forum: new version 1.2 launched ✔ (in spanish)

script php formulario multilenguaje antispam captcha

: You can buy now a customized and Multilanguage Secure Contact Form Antispam with CAPTCHA:
- see example

- Description:

Invulnerable secure antispam contact form,
JavaScript field validator in php (with Multilanguage variables)
Prevent spammers from using your form to send garbage, guaranteed.
CAPTCHA to avoid Javascript validated Spam
Easy to install and configure
Use Instructions
3 languages (that you wish)
Valid XHTML 1.1

I only require that you send me the languages that you want, and in less of 24h you will have it in your mail, completed and translated

- IMPORTANT: the script is 100€, ($125)

If you have doubts or questions about installation, in Forum and/or in Contact

Guaranteed by: and

- PHP / MySQL

Creation of an application PHP/MySQL - Register form in PHP / MySQL database and search.

Once the user is validated and registered in database, he could to acces to the system entering with his user name and password; once deposited the system, he can realize the searches of the existing products in database and see the cards with the detailed descriptions of every product.
The secondhand technology is PHP/MySQL, with XHTML 1.1. exit. - read more (in Spanish)

Resources web Quinti.net

- Validators, tests and check web links

general validity

accessibility

legislation

links

SEO - search engine optimization

+ validity

miscellaneous

- Scripts PHP

- Secure Contact Form Antispam with CAPTCHA V.1.2

Solution:

- PHP / MySQL

Creation of an application PHP/MySQL - Register form in PHP / MySQL database and search.