[ic] spamming with IC contact form?
mike at perusion.com
Fri Apr 1 13:59:17 EST 2005
Quoting Dan Bergan (danb at championshipproductions.com):
> I received a suspicious "bounce" message today and it looks like someone
> used my IC contact form to send spam.
> I use the contact form from the Foundation catalog. The form allows
> input fields for a customer's name, email address, phone number and a
> message. It looks like the form submission was crafted so that email
> address field contained much more information.
> I found the session and the "email address" field contained the following:
> From: (email address deleted)
> To: (email address deleted)
> BCC: (email address deleted)
> Content-Type: multipart/mixed; boundary=cckdvsl
> X-GUID: 959f8348-c59f-bd69-965d-e19cf43bab12
I am not aware that we have had such a form in the distributed foundation
since 4.6. Do you have a page name or URL that says where this is?
Perusion -- Expert Interchange Consulting http://www.perusion.com/
phone +1.765.647.1295 tollfree 800-949-1889 <mike at perusion.com>
Research is what I'm doing when I don't know what I'm doing.
-- Wernher Von Braun
More information about the interchange-users