Spam from Forms

[VertigoSFX]

Not sure if anyone would know this...

I have an online form made using php that I use for people to submit an application to my gaming community. It works great and everything (sends all responses to my email) but lately I've been getting spam from the forms. Everyday I check my mail and see like 5 new emails, and it's some spam thing that has submitteda form with stuff for all these prescription drugs...it's really frustrating.

Does anyone know how to prevent that or at least reduce it? Bascially is there a way to make my form more secure from that type of user?

Thanks in advance.

[Flymo]

does the form have your email addy anywhere?

[VertigoSFX]

The email address is just embedded into the php code, there is a line of code telling the form where to send the email..but nowhere on the page does it show the email address, just within the form's php code.

[Flymo]

hmmm, im not really sure on this one? you say around 5 emails now i would think uselly when another company has your email they will non-stop spam that address. But only 5 emails im thinking it might get worse.

[VertigoSFX]

Well it's not spam to the email, it's spam via the form, because I get the spam just like I was getting a form result...

for example I have name, age, xfire, games played as different areas of the form to fill out so when I get the email it has.

Name: phentermine
Age: 33
Xfire: sofjeofnsioen
Games: (here they put tons of links to prescription drug websites)

so it was spammed through the form, nmot straight to my email...it's pretty retarted.

And I'm usually getting 5 or so every day or two.

[Flymo]

arrrr, i see there not actually getting your email there spamming the forms email and insted of filling it out right, they just put links to sites et. i dont think you can stop that because the form where you can type the game you play has no blocking on it so they can type what ever they like.

[VertigoSFX]

Ya, I see what you mean. I'll try and see if I can find some code to where it limits them to type a certain way instead of putting in links the way they do.

[wtf.panda]

Make it so you personally have to approve every new member; problem solved.

[Flymo]

it would take way to much time.

[CrazyFrotto]

Im guessing that this info would be stored in the database, how about implementing a email verification before submission? Also of course you have the option of a graphic interpretation test on the form itself.

[Ashen]

I agree with using graphic verification. I also know of groups that ban certain email clients due to spammability like Hotmail and Google who no longer screen applicants and anyone/anything can create numerous accounts instantly.

[Bogo]

Yes, do a graphic verification or do something like what is 2+2= what just so the spam bots can't get past it.

[TheHeartSmasher]

CAPTCHA, some AJAX, and only allow one email to be sent from the same ip once.

[Flymo]

Like he said it's not a spambots it's just randoms advertising there shit not like 100 per dday like spam bots do.

[DrunkenPirate]

People in places like India get paid to to this all day.