1
Hello,
This is my first post, and any help would be greatly appreciated.
I create online memorials which contain guestbooks which have been the subject of computer generated spam. I have been able to modify the php script to eliminate posts containing www and http which solved the problem for a while, but the spammers are back in full force.
I need to add a security measure to eliminate the spam, but I don't want it to bee too obtrusive. I thought if I added a field to the form with a required field that was constant (with a line describing that the viewer must enter the text "VXPTO132" in order to complete the post, this would work.
Unfortunately, I don't know php enough to know how to add that string into the code. Could anyone please tell me the line(s) I need to add? Thank you in advance.
Here's the code:
<html><head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="ROBOTS" CONTENT="NOINDE X, NOFOLLOW">
<META HTTP-EQUIV="Content-Language" CONTENT="En">
<META NAME="Keywords" CONTENT="none">
<META NAME="revisit-after" CONTENT="31 days">
<title>Precio us Memories & More ~ Personal Tributes</title>
</HEAD><body>
<center>
<h2><b><font face="arial">Pe rsonal Tribute</b></h2></font><br>
</center>
<?php
/*+---------------------------------------------------------------+
| PHP GuestBook Version 1.5.0
| Copyright 1999-2000 All Rights Reserved.
| TELEMATICS SOFTWARE
| E-Mail:mr.shifter @hosted.uklinux .net
| Script License: GPL
| Script Archive at:
| http://www.hosted.uklinux.net/php/freescripts/index.php
| Upload both guestbook.php and guestbook.html, chmod 666
| to guestbook.html read/write for all. Call the html page in
| your browser and you now have a simple guestbook script.
|
+--------------------------------------------------------------+*/
/*-------------- Set Necessary Variables ----------- */
$GUEST_LIST = "guestbook.htm" ;
// Absolute path to guestbook.htm file.
// chmod 666 to this html file
$PLACE_HOLDER = "<!--Add_Comments-->";
//Position of new messages in html document.
$REFERERS = array('www.prec iousmemoriesand more.com' ,'www.goodbyes. org', 'preciousmemori esandmore.com', 'goodbyes.org') ;
// use without http://
// URL(s) of servers who are authorised to use this script.
/*------- End Variables section ---------- */
function error($error_me ssage) {
echo $error_message. "<BR>";
exit;
}
function check_referer () {
global $REFERERS, $HTTP_REFERER;
if ($HTTP_REFERER != "")
while (list($val, $ref) = each($REFERERS) )
if (preg_match("/^http:\/\/$ref/", $HTTP_REFERER))
return;
error("Unauthor ized access to: $HTTP_REFERER") ;
}
check_referer() ;
if ($action == 'write') {
$date = date("d/m/Y");
$file_array = file($GUEST_LIS T) or die("Sorry...ca n not open $GUEST_LIST");
$file = join ("", $file_array);
$name = htmlspecialchar s(stripslashes( $name));
$email = htmlspecialchar s(stripslashes( $email));
$title = htmlspecialchar s(stripslashes( $title));
$comment = htmlspecialchar s(stripslashes( $comment));
//if the comment contains "www." then stop execution of script
if(strstr($comm ent, "www."))
{
die("Sorry, but you cannot post URLs in a message. Please try again");
}
//if the comment contains "www." then stop execution of script
if(strstr($comm ent, "http:"))
{
die("Sorry, but you cannot post URLs in a message. Please try again");
}
$add = $PLACE_HOLDER;
$add .= "\n<DL><DT> <A HREF=\"mailto:$ email\">$name</A><DD><BR>$comm ent<BR><BR>Trib ute added on $date</DL>\n";
$file = preg_replace("/$PLACE_HOLDER/", $add, $file);
$fp = fopen("$GUEST_L IST", "w") or die ("Sorry...ca n not write to $GUEST_LIST");
flock($fp, 1);
fputs($fp, $file);
flock($fp, 3);
fclose($fp);
echo("<center>< p> You have entered the following tribute,<br></p><table><tr><t d>");
echo ("$add<BR>") ;
echo("</td</tr></table></center>");
echo("<center>< p>Thanks for adding your personal tribute</p></font></center>");
}
?>
<br>
<center><font face="arial" size="2" color"FFFFFF">
Return to <A HREF="guestbook .htm">the Tribute Page</A> to view your message<br>
(If your message is not displayed, click on the REFRESH button)
<hr>
</font>
</center>
</body></html>
