Member Avatar for Znojmic

Hi -

I have had a message today from my hosting company to tell me that one of the sites on my hosting account is having it's php code abused. Apparently someone is manipulating the php code from the contact form to allow them
to add Bcc addresses.

Any ideas on what I need to do to close this loop hole?

Thanks.

  • 3 Contributors
  • 2 Replies
  • 122 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by remcov
Member Avatar for DennisP

Post the content of the file, please. Enclose it in the code tags. :)

Edited by happygeek because: fixed formatting
Member Avatar for remcov

First thing you need to do is disable the script that is being comprimised. I have dealt with this issue and you do not want to be blacklisted;)

The problem is that they inject line feeds and the code for the up and left arrow key to insert for example a bcc. Take a look here, to solve the line feed. http://www.gerd-riesselmann.net/archives/2005/09/sending-spam-through-contact-forms

The up arrow and stuff is a little bit harder to fix. I can't give out the code unfortunatly cause I did not write it.... But with some Googleling you could find something.

I hope you get your forms safe again.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.