Submissions with only name and (invalid) example e-mail

Here’s an example which came in today…

https://www.dropbox.com/s/waazuo0k6prg0py/bad_form_submission.png?dl=0

…and here’s the raw e-mail, if that’s helpful (probably not)…

Delivered-To: simoneves@gmail.com
Received: by 10.107.158.77 with SMTP id h74csp6999ioe;
Wed, 10 Jan 2018 18:28:59 -0800 (PST)
X-Google-Smtp-Source: ACJfBovxGTp4eUtKHIoS1y6Y06WuAUs0XfS27XEETWLoncB+kxKH0E94GQp4bSAVnjO5LiqUBW3H
X-Received: by 10.84.216.69 with SMTP id f5mr16875932plj.422.1515637739033;
Wed, 10 Jan 2018 18:28:59 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1515637739; cv=none;
d=google.com; s=arc-20160816;
b=dWtknuHspJtJsngACFca3bDZz67Z0Wi1OQM5DcU/Z9eHxpj8oaVGcM14Haif6HgH3H
2vg26yaI/pqGiQV8/h8HUOpdnLQL0OdhKRzg++GFHvIpjrlJk1IarPTrBiXmg1dBobe8
Zx5UK7kxZwg/2eqjYfirCmA/S/ShqoZJRFepWp3gADn7FD/JHvS10uS1Fw8ZTxudA55t
UsKbQVDNRhJ60gZoPJ/m+eGAsBKbrA8sNIZ+3lC+YyWreGZzVbgVaQV+X/mmcAOOQ48F
t9cs0mckxwAm/wZCsq+UcQ703yqllLuhyKMpIXr+5dwsoGe6FbamQhv2ccA1WDbt33sp
hvCQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:message-id:from:date:subject:to
:arc-authentication-results;
bh=OlgITn8ci3t9PmkAVLsq7mtFIz6fn7H59KhZzjAxbdo=;
b=HpnAEPSNGeYSg21rnvk73PEPDtuPk2wBe8H/fhjQDFZ41iAOs7jaOxt+4jF2nBs4Kl
q3dUDdBVhhAz2Jw1xfr+TNpBQ04pa8o+GucF6+/IzPhIUlb6ErewOXfSI9+GV8B6MGRM
quNhyCA4OEP0eXwK7dbffOckd9nZNVpRLUGgRmTTrYZnjEBrqKWz91CSf19wGot3fezS
MLR9fkYV2zTgofW5KopTfuxQTgdq0b2Xxu3lUx/IUvjV8IAxYYLl6i71mFJemP7U9YuS
/CRH95FnUAZMnmHzMw6g+Zu8p5NYLsGkkaKHi3+QCVk+696GyS1UoF1Opq2IMyUQQL1x
epqQ==
ARC-Authentication-Results: i=1; mx.google.com;
spf=neutral (google.com: 208.80.4.164 is neither permitted nor denied by best guess record for domain of novatoud@sandy.canvasdreams.com) smtp.mailfrom=novatoud@sandy.canvasdreams.com
Return-Path: <novatoud@sandy.canvasdreams.com>
Received: from mxb2.tigertech.net (mxb2.tigertech.net. [208.80.4.164])
by mx.google.com with ESMTPS id c1si8143772pfi.151.2018.01.10.18.28.58
for <simoneves@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 10 Jan 2018 18:28:58 -0800 (PST)
Received-SPF: neutral (google.com: 208.80.4.164 is neither permitted nor denied by best guess record for domain of novatoud@sandy.canvasdreams.com) client-ip=208.80.4.164;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 208.80.4.164 is neither permitted nor denied by best guess record for domain of novatoud@sandy.canvasdreams.com) smtp.mailfrom=novatoud@sandy.canvasdreams.com
Received: from localhost (localhost [127.0.0.1]) by mxb2.tigertech.net (Postfix) with ESMTP id A88095A157F for <simon@eves.us>; Wed, 10 Jan 2018 18:28:58 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net
Received: from mxb2.tigertech.net (localhost [127.0.0.1]) by mxb2.tigertech.net (Postfix) with ESMTP id F10B85A1590 for <simon@eves.us>; Wed, 10 Jan 2018 18:28:56 -0800 (PST)
X-TigerTech-Content-Filter: SpamAssassin score 1.93 (HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,TO_NO_BRKTS_HTML_ONLY,T_RP_MATCHES_RCVD)
X-Spam-Flag: NO
X-Spam-Score: 1.9
X-Spam-Level: *
X-Spam-Status: No, score=1.9 required=7.0 tests=[HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.635, MIME_HTML_ONLY=1.105, RCVD_IN_DNSWL_NONE=-0.0001, TO_NO_BRKTS_HTML_ONLY=0.199, T_RP_MATCHES_RCVD=-0.01] autolearn=disabled
X-TigerTech-Spam-Status: Level 2 (High) (P0); Accepted (Neutral)
Received: from sandy.canvasdreams.com (sandy.canvasdreams.com [74.85.244.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mxb2.tigertech.net (Postfix) with ESMTPS for <simon@eves.us>; Wed, 10 Jan 2018 18:28:56 -0800 (PST)
Received: from novatoud by sandy.canvasdreams.com with local (Exim 4.89_1) (envelope-from <novatoud@sandy.canvasdreams.com>) id 1eZSbs-0005M1-L0 for board@novatotheatercompany.org; Wed, 10 Jan 2018 18:28:52 -0800
To: board@novatotheatercompany.org
Subject: Contact Us with Captcha
Date: Thu, 11 Jan 2018 02:28:52 +0000
From: “‘Contact Form Inquiry'” <noreply@novatotheatercompany.org>
Message-ID: <cc6e0bece223f80837eb9f1469baf330@www.novatotheatercompany.org>
X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – sandy.canvasdreams.com
X-AntiAbuse: Original Domain – novatotheatercompany.org
X-AntiAbuse: Originator/Caller UID/GID – [1220 508] / [47 12]
X-AntiAbuse: Sender Address Domain – sandy.canvasdreams.com
X-Get-Message-Sender-Via: sandy.canvasdreams.com: authenticated_id: novatoud/from_h
X-Authenticated-Sender: sandy.canvasdreams.com: noreply@novatotheatercompany.org
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/novatoud/public_html/index.php
X-Source-Dir: novatotheatercompany.org:/public_html

<p><table border=”1″ cellpadding=”3″ cellspacing=”0″ style=”width:600px;”><tr valign=”top”><td
>Name:</td><td >Lewis Richards</td></tr><tr valign=”top”><td >E-mail:</td><td >ex:
myname@example.com</td></tr></table></p>

I cannot find Settings -> General -> Email Address (or Settings at all, for that matter). There is Form Options -> Email Options which shows the “send to administrator” address correctly, and that works.

The problem is not that address, as we always get the e-mails (since I set that address properly; it was not correct when I inherited the site). The problem is us getting submissions which still have the default “ex: myname@example.com” e-mail field (with the “ex:” prefix!) and which are therefore impossible to follow up on. That text only appears as “Placeholder” in the e-mail field definition, set as Required. I don’t see how anybody is able to do a Submission without editing that to at least remove the “ex:” prefix.

I believe these are spam submissions from some bot. Here is a more obvious one we got the other day:

[spam redacted]

• This reply was modified 8 years, 4 months ago by Steven Stern (sterndata).

It was like that, except with a space between the colon and ‘m’. I removed the space. Would that make a difference?

I also changed the theme to the current Default Theme, as it said the one previously selected was “outdated”.