Name(s): boldness9042@interpersonalskills.co.uk
Address:boldness9042@interpersonalskills.co.uk
Post Code: boldness9042@interpersonalskills.co.uk
Phone Number: him
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: she, hear what they
bcc: charleslegbe@aol.com
af4798de07d7272102cd5fa8263ea084.
Email: boldness9042@interpersonalskills.co.uk
Keep them updated?: YES

Enquiry:
boldness9042@interpersonalskills.co.uk

Submitted from 202.99.16.206 at 19/12/2005 - 04:58:07

-----------------------------------------

We usually recieve four or five of these in one go all being sent out with a minute and mostly from the same IP address.

We have some basic javascript validation on the form page but currently nothing is validating server-side before the processing. The javascript is obviously being bypassed though as elements like the phone number should be numbers only.

What stands out from this is the insertion of the code...

Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: she, hear what they
bcc: charleslegbe@aol.com
af4798de07d7272102cd5fa8263ea084.

... which isn't in the cfmail in the form processing.

Incase it helps here's my processing code...

<cfmail to="client_email_address" bcc="emailed to me" from="info@interpersonalskills.co.uk" subject="T.I.P.S - Website Contact Form Submission" >
 Name(s):    #form.name#
 Address:    
 #form.address#
 Post Code:   #form.postcode#
 Phone Number:  #form.telephone#
 Email:   #form.email#
 Keep them updated?: <cfif IsDefined("form.updates")>YES<cfelse>N0</cfif> ; 
 
 Enquiry:   
 #form.enquiry#
 
 Submitted from #CGI.REMOTE_ADDR# at #DateFormat(now(), "dd/mm/yyyy")# - #TimeFormat(now(), "HH:mm:ss")#
</cfmail>

 <cfquery datasource="tips">
   INSERT INTO enquiry (name, address, postcode, telephone, email, enquiry, updates)
   VALUES ('#form.name#', '#form.address#', '#form.postcode#', '#form.telephone#', '#form.email#', '#form.enquiry#',<cfif IsDefined("form.updates")>1<cfelse>0</cfif> )
 </cfquery>

Has anybody else had a problem like this and if so how can I stop these guys from getting through "the net".

Cheers in advance and Merry Xmas everybody,
James