Getting your address ? About nil I’d say 🙂
Moderator
James Huff
(@macmanx)
Volunteer Moderator
No, there is no possibility of a spam bot getting your email address from a contact form. But, if you are running a version of WP-ContactForm below the current release (v1.3), then it is possible for a spam bot to send email spam to you via the contact form.
Zenpop: Sorry, I get alot of mail. There is no way to farm an email address from the form. The form just sends the data back to a script and is no way printed in the source of the page for a bot to harvest.
There may not be a way to farm an email address from the form, ryanduff, but there is a way robots are submitting to it. If you wish, I will forward the group of three I just received to your email address, and maybe you’ll be able to see what they’re doing and how. Just let me know at bj at kickasswebdesign dot com.
Kinda bums me out since I installed this to foil this very thing, and your site says, “Improved Spam Handling– now rejects bot generated spam messages”
There’s really nothing to stop a robot from parsing the form and sending a post request to the appropriate location. Chances are, these submissions are bots that are designed to look for comment forms, and happen to mistake your contact form for something that they can use to spam your website. I’d recommend Referer Karma and Spam Karma 2:
http://unknowngenius.com/blog/wordpress/spam-karma/
http://unknowngenius.com/blog/wordpress/ref-karma/
However, the newer version of the script (1.3) does prevent email injection attacks, which could have been used (in the 1.2 version) to send spam emails to countless recipients using your server’s resources, and leaving you to blame.
