Timeline for Why do bots search for / fill and send contact forms?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 16, 2014 at 14:25 | vote | accept | kcdwayne | ||
| May 16, 2014 at 14:25 | comment | added | kcdwayne | ^ This sounds like a possible explanation for the 6k emails sent. Thanks for the information. | |
| May 16, 2014 at 14:14 | comment | added | John Conde♦ | They'll check to see if you allow header injections in your email. If you do, they'll use your form to send spam. It's kind of a broad topic but it sounds like you understand more than the basics already. | |
| May 16, 2014 at 14:05 | comment | added | kcdwayne | Could you please elaborate on the potential vulnerabilities? Obviously unsecured uploads and links to malicious software are potential threats, but I'd like to make sure my bases are covered. SQL injection could also be a threat, but I use bound parameters via PDO and sanitize server-side prior to any database transaction. | |
| May 16, 2014 at 13:23 | history | answered | John Conde♦ | CC BY-SA 3.0 |