How to Avoid Spamming through Tell a Friend Form

[The Edifier]

The tell a friend form enables users to include their custom message along with the default message that is being sent.

I intend to eliminate the possibility of spammers using that text area for sending their content placed within it. [Can even Spambots do that !!! may be]

There are two solutions i thought of ......

1) Remove the text area completely and add that line of text to the code used for processing that mail form

2) make the text-area a hidden element .... which i thought would be a bit easier for pligg users without much programming knowledge ....

I was not able to locate the file containing/generating this code relating to the tell a friend form .

<span id="emailto-2" style=""><fieldset>
<legend><span class="sign">Tell a friend</span></legend>
<form name="email_to" method="get" action="http://www.futureaccountant.com/news/recommend.php">
Enter up to 3 addresses: <br>
<input name="email_address_1" size="35" id="email_address_1_2" value="" type="text"><br>

<input name="email_address_2" size="35" id="email_address_2_2" value="" type="text"><br>
<input name="email_address_3" size="35" id="email_address_3_2" value="" type="text"><br>
<br>Add a comment?<br>
<textarea name="email_message2" id="email_message2" cols="40" rows="5">I thought you might like to see this.</textarea><br>
<br><input name="email_to_submit" value="Submit" onclick="emailto (16, 2, 'http://www.futureaccountant.com/news/', 3);" class="log2" type="button">
</form>
</fieldset></span>

</span>

Can someone please help

Thanks in advance

[diablo]

use "submit once" script php or javascript with cookies or even database,
and show form only for registered users

and use special software to find text in files like
Super Text Search 2.8
http://www.galcott.com/ts.htm

[kbeeveer46]

The files you are looking for are recommend.php and recommend_small.tpl. You can also eliminate most of this problem by only allowing registered users to use the tell a friend form.

[TJ3]

Admin » Configure >> Summary-Recommend >> Set tell a friend to false...

Any spammer can sign up and start spamming away if they really wanted to.. I just set it to false. Better safe then sorry.