Form-Mail Spam Woes

There’s no target too small for spam, apparently. Chiming in to agree with me is Mr. Cabanillas, who apparently has experienced the exact same result these past few days.

The last line of spam defence, form-based emailing, is now being targeted by overly complimenting spammers.

What’s there left to do? I can’t use Akismet on form mail, and since the spam is wrapped in headers created by my own form, it’s harder to classify as spam. Maybe one of them Are you human, sorry I have to ask? checkboxes? How would one go about creating such?

Responses to “Form-Mail Spam Woes”

  1. I’ve got some rules checking some things in the php of my form mail. It’s effectively stopped all spammer abusing it, while still letting normal mails through. Of course, it’s not watertight, but it’s more than good enough.

    If you like, I could send it to you.

  2. gareth says:

    how about doing some work to your .htaccess file:

    http://www.javascriptkit.com/howto/htaccess13.shtml

  3. Joen says:

    If you like, I could send it to you.

    Yes please. You can, uh… use the form to contact me.

    how about doing some work to your .htaccess file:

    I’ll look into that, thanks.

  4. Chris says:

    Joen, when you figure it out let me know so I can just copy you. :)

  5. Rob Mientjes says:

    Same here. I need a good solution as well. It’s been bugging me, even if I only received about five mails through it.

  6. Yes please. You can, uh… use the form to contact me.

    Somehow, your mail address itself seemed easier, considering I needed to send an attachment :)

    Mail sent, questions always welcome.

  7. Joen says:

    Mail sent, questions always welcome.

    Thanks again.

    I now have it deployed on my server, and I have checked to make sure that it does in fact send mail when used properly. Now to wait and see if I don’t get any spam.

  8. andper says:

    Bad Behaviour reduced this silly contact form spam at my site to zero.

  9. Joen says:

    Bad Behaviour reduced this silly contact form spam at my site to zero.

    But how do you hook up a homebrew contact form to bad behaviour? Or is there some plugin I should use instead?

  10. I wonder if Akismet would be suited for this task too.

    (And given the higher level of private information likely to be found in contact forms as opposed to journal comments, if it’s appropriate.)

  11. andper says:

    But how do you hook up a homebrew contact form to bad behaviour? Or is there some plugin I should use instead?

    Sorry for the late reply. Bad Behaviour defends all WordPress generated content from evil spammers, right? Well, if a contact form (mine is neither a WP plugin) is written as a part of a WordPress “Page”, than that contact form is also unavailable to bots that are blocked by BB, which outputs its javascript code into the WP header globally.

    No extra configuration needed. :)