Posted by websupportguy on January 17, 2011 at 10:32pm
All of a sudden I am getting lots of spammers using my Drupal 6.9 website contact/feedback form to send me messages containing strange links
I'd like to have provided a sample, but I can't because it fires off the group's spam filter! How do I add that to my Drupal website???
You can see what they are putting into my contact form at http://drupal.org/node/1030438.
What are they trying to achieve by this? And what should I be doing to prevent it?
Tony
Categories: contact form, Spam prevention, spam spammers, Australia wide
Comments
use mollom module to control
the spammers have no brains - just make it harder for them to use the contact form
cheers
First off, you really should
First off, you really should update your site. The current version would be 6.20 and there are a few security bugs that have been fixed.
Offhand, I don't know if there would be a vulnerability on the contact form, but you might look into installing Mollom to protect your contact form: http://drupal.org/project/mollom
http://cleaver.ca
-
If you've got an old version of Drupal 6 you've got known security issues. It's pretty easy for someone to work out which version you're running.
I'm not a security expert but once a spammer finds you, they wont stop until you block them. As well as mollom, see if you can block their IP.
-=[o]=-
I prefer the Spam module (it's just called that) if you're using 6. It's pretty good. Am hoping it will get ported to 7 before I have to think about porting it myself as I'm not quite that good yet. As to why, I suspect they're trying to game search results and are too stupid to realise that people are more likely to avoid them like the plague they are the more desperate to be seen/clicked on they get.
yes yes mollom
Have you signed up for mollom and tried to module please visit http://mollom.com/ http://drupal.org/project/mollom Mollom could be seen as the defacto standard in the community on some levels :) the attacks your getting are from bots, implement mollom and trust me watch the spam diminish xD
regarding what the guys said above about drupal core that is your biggest issue, right now i am trying to clean up a site where a development house has left the client on drupal 6.6 because they told the client it was impossible to upgrade. The first thing on my schedule is to upgrade to 6.20. Core upgrades to drupal should never effect a site unless someone previously has hacked it :( and if that's the case you can find that out with a combination of these modules http://drupal.org/project/hacked http://drupal.org/project/diff :D
@ryivhnn does Spam module
@ryivhnn does Spam module work for you on contact forms? I thought it only worked on comments.