| T O P I C R E V I E W |
| leatherlips |
Posted - 11 March 2009 : 17:40:53
I have posted a Contact Page MOD over at SnitzBitz. Thanks to Carefree and TastyNutz for helping me add the features I wanted to have in it.
The purpose of this mod is to provide a contact page that visitors to your site can use to easily contact you.
This contact page has several features built in.
- It checks to see if all fields have been entered. If not, it gives a warning to go back and fill in the necessary information.
- It includes an anti spam code that a user must input correctly before the form will be sent. This helps to prevent bots from automatically spamming your contact page.
- The email address that the contact form is sent to is hidden in the source code. This helps to prevent bots from learning your email address and spamming it.
- It includes a character count that limits how much can be typed. The default is 500 characters but can easily be changed.
- It includes an automatic spam filter that detects known words used in spam emails. If any of the words are detected then the form will not be sent and the user will automatically be redirected to the website of your choice.
You can go here to download it. |
| 15 L A T E S T R E P L I E S (Newest First) |
| leatherlips |
Posted - 15 March 2009 : 17:16:08
I didn't realize the password.asp page did that.
I guess you could change each line to something like this:
If this problem persists, please <a href=""contact.asp"">contact</a> the Administrator of the forums. |
| Etymon |
Posted - 15 March 2009 : 13:38:37
Not really. Just was pointing out that the administrator's email address is exposed there as well. I'm not sure about Snitz 3.4.06, but since it is in Snitz 3.4.07, I am guessing the same code is in Snitz 3.4.06.
Snitz 3.4.07 - password.asp
Line 67:
If this problem persists, please contact the <a href=""mailto:" & strSender & """>Administrator</a> of the forums.
Line 72:
If this problem persists, please contact the <a href=""mailto:" & strSender & """>Administrator</a> of the forums.
Line 95:
If this problem persists, please contact the <a href=""mailto:" & strSender & """>Administrator</a> of the forums.
Line 100:
If this problem persists, please contact the <a href=""mailto:" & strSender & """>Administrator</a> of the forums. |
| leatherlips |
Posted - 15 March 2009 : 07:40:54
quote:
Originally posted by Etymon
Hey leatherlips,
Did you include password.asp in your MOD?
No. Do you have a suggestion? |
| Etymon |
Posted - 15 March 2009 : 04:55:28
Hey leatherlips,
Did you include password.asp in your MOD? |
| Etymon |
Posted - 15 March 2009 : 03:12:08
Doh!  |
| HuwR |
Posted - 15 March 2009 : 02:43:02
quote:
Originally posted by Etymon
quote:
Originally posted by HuwR
I'm pretty sure the numbers are supposed to be that way, it isn't a white background if you look closely, it is striped.
Good spot, Huw. I didn't see that. I began wearing glasses last spring for the first time ever. I often kid myself by thinking I don't need them for reading the monitor! 
LOL, you are obviously getting old like me, I started when I could no longer hold my pda far enough away to see it  now I can't even see anything on my PC without glasses, it is just a fuzzy blur. Oh the joys of getting older. |
| Etymon |
Posted - 14 March 2009 : 19:10:33
quote:
Originally posted by HuwR
I'm pretty sure the numbers are supposed to be that way, it isn't a white background if you look closely, it is striped.
Good spot, Huw. I didn't see that. I began wearing glasses last spring for the first time ever. I often kid myself by thinking I don't need them for reading the monitor! |
| Carefree |
Posted - 14 March 2009 : 18:51:23
quote:
Originally posted by HuwR
there really is no point in using scrollcode tags to display a single line of code. It is a lot easier to read if you just use a normal code tag
I have it encoded in a macro, I'll have to write a new one for this forum. |
| leatherlips |
Posted - 14 March 2009 : 17:43:46
quote:
Originally posted by Carefree
Line 250 is missing the source information for the javascript routine.
Actually, it is not incorrect. I added it just like the instructions said from the source (Dynamic Drive). Mine works perfectly on my page the way I have it. The javascript source is in the inc_header page as per the instructions.
Regarding numbers, you can use any number gifs you want. Just overwrite the ones I included with your own. |
| HuwR |
Posted - 14 March 2009 : 17:28:06
quote:
Originally posted by Etymon
If you want transparent numbers (no white), then here are the icons ... Download.
This is what they look like:
         
I'm pretty sure the numbers are supposed to be that way, it isn't a white background if you look closely, it is striped. |
| HuwR |
Posted - 14 March 2009 : 17:26:31
there really is no point in using scrollcode tags to display a single line of code. It is a lot easier to read if you just use a normal code tag |
| Carefree |
Posted - 14 March 2009 : 15:36:32
Line 250 is missing the source information for the javascript routine. It should say "<script type=""text/javascript"" src=""fieldlimiter.js"">" & vbNewLine & _
|
| Etymon |
Posted - 14 March 2009 : 14:51:46
If you want transparent numbers (no white), then here are the icons ... Download.
This is what they look like:
|
| TastyNutz |
Posted - 14 March 2009 : 08:49:12
quote:
Originally posted by Shaggy
[black]Good work, LL; surprised it's taken this long for somebody to come up with a mod like this.
There was already a basic mod for hiding the admin email.
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=65403&SearchTerms=contact+admin
But nobody noticed the pop up form itself still left the admin email exposed. |
| HuwR |
Posted - 13 March 2009 : 08:02:12
quote:
I actually think (but need confirmation), given how inc_mail.asp is written with all e-mail headers specified explicitly, that Snitz can't be hijacked like that - if it could, I'm sure we would have heard about it by now
I'm not so sure, how else would one send email? As far as I know they all work like that for ASP, I think the forums strength is that you need to be logged in with a valid email address in order to use the email facility and you are therefore traceable, whereas these exploits are on drive by contact forms that anyone can submit you do not need to be registered to use them. |
