customised contact form plugin - spam

[tazilein]

Hi !

Some month ago I customised the contact form plugin to get more fields and disabled captchas as I needed it as a reservation form.

1) if I update the plugin my custom code would be removed, am I right ?

2) Since 3-4 days I get up to 8 reservations caused by a spambot. In the comment field I get a text like this: hello kidz!

<a href="####">buy levitra</a> buy levitra LINK removed

thank you! bye:-)

As I removed captchas it was clear that something like this will happen. Can the contactformplugin be used for sending spam to others or are these mails only sent to me ?

[yellowled]

Some month ago I customised the contact form plugin to get more fields and disabled captchas as I needed it as a reservation form.

1) if I update the plugin my custom code would be removed, am I right ?

If you did your customizations by editing .php or .tpl code, yes. (As far as I remember, captchas could be disabled from the admin panel?)

As I removed captchas it was clear that something like this will happen. Can the contactformplugin be used for sending spam to others or are these mails only sent to me ?

Depends on what you actually changed. I suggest to backup your custom files, update the contact form plugin, reactivate captchas, and after that post your customizations here. Usually the contact form as supplied on spartacus should be safe, but with customization, you never know ...

YL