Proper PHP form validation to stop SPAM

[mantawebsolutions]

Can someone direct me to where i can find an easy way to stop automated submissions from occuring via my website's enquiry form.

if you want to take a look at my form go to w*w.mantawebsolutions.com/contactus.php

The validation uses JS as can be seen here: w*w.mantawebsolutions.com/enquiry-validate.js

any help will be fantastic, thanks

[irodgers]

Strip out anything that can be interpreted by php. I only realised this myself a few days ago. Spammers were using my enquiry form and were putting php scripts into the actual text box. So use -

stripslashes()
strip_tags()
escapeshellcmd()
htmlspecialchars()

Those are php commands by the way.

I think that should do it.

[mantawebsolutions]

thanks irodgers. i am using stripslashes() in my form action but not the others, will find out how to correctly apply them

[stymiee]

You need to use CAPTCHA

[irodgers]

Originally Posted by stymiee

You need to use CAPTCHA

w3 has a bit of a dislike of CAPTCHA - see -

http://www.w3.org/TR/turingtest/

[Webnauts]

Thread moved here...