for some reason a guestbook i coded in php gets spammed since about 1 week - app. 10 entries per day with content like this
cBlE3U
[URL=http://xxx-link]girls kissing girls[/URL]
[URL=URL=http://xxx-link]xxx words[/URL]
[URL=URL=http://xxx-link]xxx words[/URL]
[URL=URL=http://xxx-link]xxx words[/URL]
[URL=URL=http://xxx-link]xxx words[/URL]
i don't have the time to implement capatcha right now so here is a short work-around how i fixed it temporarily
original code
- $id = time();
- $name = addslashes($name);
- $email = addslashes($email);
- $homepage = addslashes($homepage);
- $message = addslashes($message);
- ...
- $pos = strpos($message,"[url");
- $sqlcommand =
- "INSERT INTO guestb (id, ...) VALUES ('$id', ...)";
- mysql_query($sqlcommand)
- or die("Error: " . mysql_error());
- echo "thx for your entry";
modified code
- $id = time();
- $name = addslashes($name);
- $email = addslashes($email);
- $homepage = addslashes($homepage);
- $message = addslashes($message);
- ...
- $pos = strpos($message,"[url");
- if ($pos === false) {
- $sqlcommand =
- "INSERT INTO guestb (id, ...) VALUES ('$id', ...)";
- mysql_query($sqlcommand)
- or die("Error: " . mysql_error());
- }
- echo "thx for your entry";
Read more...