Page 1 of 1
spam victim or just a try ?
Posted: Mon Jan 14, 2008 1:44 pm
by tazilein
I am using serendipity as CMS for my apartment rental and the contact form is adapted to be a reservation form. Yesterday and today I got mails that are obviously spam and have many links in the comment area - did the bot think that this is a blog comment form or do they try to send spam to other adresses with this "reservation" ?
a picture can be found
here
Re: spam victim or just a try ?
Posted: Mon Jan 14, 2008 2:22 pm
by yellowled
tazilein wrote:Yesterday and today I got mails that are obviously spam and have many links in the comment area - did the bot think that this is a blog comment form or do they try to send spam to other adresses with this "reservation" ?
How should a bot be able to distinguish between a contact form, a comment form or another kind of form? To the bot (which is just a piece of software), they're all forms, and forms can - maybe - be exploited to send spam, period. This one is obviously able to fill out all possible kinds of fields in forms, so it does just that. It only looks like a reservation because the fields of the form obviously limit the possibilities of input to sensible values, which it almost looks like somebody tried to fill out the form correctly.
Actually, the (only) interesting part is whether the bot script was able to send this mail to more recipients than just the email address of the contact form. However, you can be pretty sure this isn't the case with Serendipity's contact form - as far as I know, for that matter.
YL