Tag Info

Hot answers tagged

4

SPAM reasons, Yes. Google no. There are non-Google spiders that look specifically for email addresses, presumably for SPAM purposes. So over the years people have tried to find ways to make email addresses less "visible" to spam crawlers. A very common way is to display name (at) domain (dot) com with a script behind it to allow the link to work as an ...


3

No, that is not true. Email address obfuscation is the result of webmasters attempting to make their email addresses unrecognizable to spambot crawlers. Spammers employ bots that crawl the Internet looking for email addresses to harvest so they can send spam to them. By changing the @ symbol into (at) the webmaster is hoping that the spambots will not ...


3

The ideal way to do this is to send a hard fail on email that isn't coming from your server IP address or your specified MX record by doing this: v=spf1 +a +mx -all This however will not Stop the email from being sent. Spam filters do various checks on an email that has been sent out, one of them will be a check on the SPF record of the domain it is ...


2

Yes you can. In fact, I recommend it and others too. I would not work so hard on my regular expression to include version numbers- just ^PHP.*$ You will find that some agent names are consistently up to no good even though some will argue that they can be used for good and should not be blocked. That is a negative argument. I study these things and I ...


2

PHP user agents are known as libraries. It should be no problem if you block them since legitimate crawlers use other string types, however, can't you check and block only the IP's? In this site, for example, you have ways to block only Chinese traffic.


2

There is basically only two options to do anything about it: Look up the management contact for the ip sending spam, (the whois utility can do it for you,) and send them an email and hopefully the spammer will be suspended. Block the IPs/IP ranges that is sending the spam from your contact form.


2

To be honest with you I would like to think that Mail Chimp will have spf records and domain keys etc all sorted out and generally keeping the reputation of their infrastructure clean. Hence I would imagine this will be issues with your content and interactions from your recipients. A couple of things I have noticed straight off. It looks quite image ...


2

By far my favorite technique is called a 'honeypot'. Here is how it works... Say your form asks for a name. Put the following two fields on the page: <span class='hp'> <label for='Message'>Message:</label > <textarea id='Message' name='message' /> </span> <span> <label for='TmpField'>Message:</label > ...


2

From my personal experience, I have found that CAPTCHA is virtually ineffective when it comes to preventing spam attacks. What I use and I found to be the most useful is adding a field to the form and covering it with CSS so that it is not exposed to human visitors. Spam bots feed value to these fields and can be blocked easily. It is simpler than any of the ...


1

My experience has been to use a "generic"alias for position-based email (e.g. webmaster, admin, sales, etc.) and send it to the address of whomever has those duties at the time. You can often add more than one address to the alias list, so if you need to keep records of all incoming messages you can send them to an additional box that you maintain control ...


1

It is best to use just webmaster@address.com. This way, webmasters every year will have a record of, and will easily be able to refer to, historical mails if needed. Volunteer organizations, more often than not, need to keep records, and changing the email ID every year is unthinkable! If you want to attribute the work of each webmaster to them as and when ...


1

Either: Your attempt at adding captcha can be bypassed. The email address is known and the spam is not coming through the contact form. Its very hard to tell exactly what is wrong without a link to the site to investigate. I am the author of free open source contact form software that is designed to solve this very problem. My contact form: Never ...


1

To delete all the spam pages, instead install extension DeleteBatch. Edit a script file from Special:AllPages of all the page names you want deleted. Load this into Special:DeleteBatch. Use PHPmyAdmin to mass delete the unwanted users.


1

There is not enough information for anyone to really know what is going on here. But here is what you may be missing. Any system has several services installed along with applications; FTP, HTTP, SSH, DNS, and PHP and Java are fairly common. You will have more. Each service and application can be vulnerable. PHP and Java are environments/languages that can ...


1

It might already be too late to use this idea since the spammers already know about the form: leave out a critical piece of your form (like the action attribute) and populate it using javascript when the document is loaded. Do tell visitors that the form doesn't work if javascript is disabled and remove this message when the form is set up correctly.


1

Use canonical URLs for your content pages. Then whenever Google crawls or find a link to one with the referrer in the query string it will automatically associate it with the canonical URL. The canonical URL will be the URL Google shows in the search results. It also prevents your site from appearing to have duplicate content.



Only top voted, non community-wiki answers of a minimum length are eligible