Using preg_match to block spam URLs in PHP forms

•

What is DaniWeb IT Discussion Community?

You're currently browsing the PHP section within the Web Development category of DaniWeb, a massive community of 422,412 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 5,046 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.

Join our community!

Please support our PHP advertiser: Lunarpages PHP Web Hosting

Thread Tools Display Modes

Views: 704 | Replies: 0

•

Join Date: Jun 2008

Location: Poole, Dorset

Posts: 1

Reputation: Tig is an unknown quantity at this point

Rep Power: 0

Solved Threads: 0

Tig

Offline

Newbie Poster

Using preg_match to block spam URLs in PHP forms

Jun 12th, 2008

Hello

I have a PHP website form that gets filled out with spam - mostly URLs. To try and stop this I have inserted the following code into my form:

 Help with Code Tags 
 php Syntax (Toggle Plain Text) 
$SpamErrorMessage = "No website URLs permitted";
 
if (preg_match("/http/i", "$telephone")) {echo "$SpamErrorMessage"; exit();}
if (preg_match("/http/i", "$website")) {echo "$SpamErrorMessage"; exit();}
if (preg_match("/http/i", "$email")) {echo "$SpamErrorMessage"; exit();}
 
/* If e-mail is not valid show error message */
if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email))
{
    show_error("E-mail address not valid");
}
 
/* If URL is not valid set $website to empty */
if (!preg_match("/^(https?:\/\/+[\w\-]+\.[\w\-]+)/i", $website))
{
    $website = '';
}
$SpamErrorMessage = "No website URLs permitted";

if (preg_match("/http/i", "$telephone")) {echo "$SpamErrorMessage"; exit();}
if (preg_match("/http/i", "$website")) {echo "$SpamErrorMessage"; exit();}
if (preg_match("/http/i", "$email")) {echo "$SpamErrorMessage"; exit();}

/* If e-mail is not valid show error message */
if (!preg_match("/([\w\-]+\@[\w\-]+\.[\w\-]+)/", $email))
{
    show_error("E-mail address not valid");
}

/* If URL is not valid set $website to empty */
if (!preg_match("/^(https?:\/\/+[\w\-]+\.[\w\-]+)/i", $website))
{
    $website = '';
}

However, I have another field in the form that asks the user what their website address is. Of course when they fill that out, the above code blocks it meaning that when they click on 'Send' it tells them that "no URLs are allowed", so they can't submit the form. If I take out the line:

if (preg_match("/http/i", "$website")) {echo "$SpamErrorMessage"; exit();}

the form works - though the person filling it out would have no way of knowing that of course - but on the thank you page gives an error message.

I'm not sure how to escape the above code about the website. If it wasn't for the fact I ask them for their own URL the code would work fine to stop spammers!

Any advice hugely appreciated!

Thanks.

Tig

Last edited by peter_budo : Jun 16th, 2008 at 7:55 am. Reason: Code tag correction, closing tag is [code] not <code>