Plug-in: zem_contact_reborn

-P- · 2006-02-15 11:38:51

<blockquote> > thebombsite wrote:

@-P- I am aware your spam came through the normal form functions however Bloke makes a good point about keeping the core code to a minimum and using the new API to add extra functionallity, but only if YOU want it. With this in mind I will have a word with Tranquillo and Anura about whether the “Send Article” and the hopefully soon to come “Select Recipient” can be separated into their own plug-ins.
</blockquote>

Yes, I know that you know that :) Putting “Send article” to separate plugin sounds very good idea.

<blockquote>In the mean time it would be interesting to see if the current plug-in is working properly to stop spam, particularly from those who were having problems last week.</blockquote>

I only have contact_reborn running on one installation that got hit last week. I have not at least received any similar spam nor my ISP has not contacted me again about malicious usage. So I assume it is ok, can´t be absolutely sure thou. I hope you understand my reasons not to test it widely yet.

<blockquote> > Bloke wrote:

> @-P- : Thanks for clearing that up. I must have misunderstood your earlier post. It was late in the day, sorry. Upon reflection, I think I may have been a bit obtuse in my last post on a few counts, but hey I’m still learning. Forgive me…

Regarding the whole spam thing, while I agree it’s a pest to receive unwanted spam to your own email address, I am more concerned about spammers using various injection attacks/bots to use zem_contact_reborn as a jump-off point to send spam to other people. I don’t particularly want my brand diluted by a spammer sending a message to a few hundred thousand people by inserting carefully-crafted headers into the form fields, because the people who receive it will think it’s from me. I then get a slew of angry people asking why I sent them stuff about xanax from my company e-mail address. Not to mention that if it does happen, my hoster will shut me down. That’s what I meant by “am I right in thinking the plugin’s fairly hardened in this [vanilla contact form] mode because there’s no facility to inject an email address?”</blockquote>

You´re welcome :)
And yes, occasional spam is mean thing. But what here just happened, was that 20.000 spam emails were sent using my contact forms with fake email addresses from three of my domains. One of them is the one that “runs” my virtual server, other two are private ones. Luckily spam bot did not hit to business domains that I host cause it could make serious damage in a way you mention above.

I talked yesterday to one guy who runs own it-business with own server. They had these same attempts via their contact form but since there was a time limit (only one email sent per 10 minutes or something) the spam bot was not able to hit.

els · 2006-02-15 16:07:37

thebombsite wrote:

@Els – Doesn’t it tell you where the email came from? Or am I grabbing the wrong end of the stick here?

Ah, I must have been sleeping… forgot to look for “X-Mailer: Textpattern (zem_contact_reborn)”. It isn’t there. Thanks Stuart for waking me up.

In the mean time it would be interesting to see if the current plug-in is working properly to stop spam, particularly from those who were having problems last week.

Nothing so far, but then I only received four spam emails last week.

Champak · 2006-02-17 18:38:16

Is it possible to 1/ limit the “@” to just one in the to and from text areas. If there is more than one then you get a fail message upon trying to send. And then 2/ set a cookie or something to where the person can only send a specific amount within a specific amount of time….like 3 within 3 months. I know the second part wont really do that much, but it’s just added security.

bruno · 2006-02-20 15:30:43

Hello, many thanks to all of you for this indispensable plugin.

A Browse attribute could be very practical. It would produce a html line like that:
<code>input type=“file” name=“anylabel” size=“16”</code>

(thank you doggiez!)

Last edited by bruno (2006-02-20 15:43:11)

els · 2006-02-20 15:33:40

< code > < /code > without the spaces ;)

squaredeye · 2006-02-23 03:34:12

Does anybody care to offer an example or a couple of how they are using the to_form tag?

I continue to get the error “To” address is missing.

I am using the following forms:

form = Contact
<code>
<h2><txp:title /></h2>
<txp:zem_contact to_form=“to_form” >
<txp:zem_contact_text label=“name” />
<txp:zem_contact_email /><br />

<txp:zem_contact_text label=“Phone” min=7 required=“no”/><br />
<txp:zem_contact_textarea label=“Message” /><br />
<txp:zem_contact_submit label=“send your message” />
</txp:zem_contact>
</code>

form=to_form

Thx.

Matthew.

ps. sorry if its in the thread somewhere, I couldn’t find it.

thebombsite · 2006-02-23 12:11:00

I’ve not heard of a problem using “to_form” before. I’ve just tried it out on my /test/ site without a problem though I didn’t use a custom field in the “to_form”. Just looking at your code, I’m wondering if you’ve copy/pasted it across because, if you have, you are showing the custom field name as “email-adress”, which is incorrectly spelled. I wonder if that is what is wrong.

In the mean time I have managed to make the “button element” work, or at least it looks OK so far.

Last edited by thebombsite (2006-02-23 12:14:23)

squaredeye · 2006-02-23 15:49:39

Stuart,
The spelling was a good catch, although not the issue.
I tried replacing the contents of the “to_form” with a simple email address and that worked fine,
so somehow the email address is not getting passed from the custom field in the article to the “to_form”?

If you or anyone else has experimented with this any help would be appreciated.
Thx,

Matthew

thebombsite · 2006-02-23 15:58:27

Well as I don’t use custom fields you’re going to say “how has he got away with it for so long” aren’t you? I’m assuming that the custom field is attached to an article and maybe your “to_form” needs to be called inside the article’s form otherwise the custom field will be empty. /-S

I’m now going to put the lid back on my can and move slowly away from my PC whilst you aren’t looking. OK? ;)

squaredeye · 2006-02-23 16:33:26

Stuart,
hello, stuart, where’d you go?

I thought that’s what the to_form=“whateverform” was supposed to work. If people are just populating the to_form contents with an email address, they might as well hard code it into the zem_contact_reborn tags itself in the to=“whatever@whatever.com” property?

I must be missing the usefulness of this otherwise. When Mary implemented it, it was my need for this kind of thing that instigated and I use it on another site (but with a hack of applied that checks for an email associated with that section’s author). I’d really like to make this work so that end-users can simply enter their email address, title the article and have a contact form for themselves. Otherwise I put the zem_contact_reborn tags into an article’s body and they have to look for the email address itself and change it. Not that hard, but still.

I wouldn’t know how else to call the custom_field into that part of the tag in the article form.

It can’t look like this:
<code>
<txp:zem_contact to_form=”<txp:article form=“to_form” />” />
</code>

So I’m stumped.

Matthew

thebombsite · 2006-02-23 16:41:39

You’re either missing my point or my point has gone blunt. The custom field’s contents have to come from somewhere so where is that?

On the other hand this might be a possible cause??

Last edited by thebombsite (2006-02-23 17:15:06)

squaredeye · 2006-02-24 05:25:37

Stuart,
Thanks for your help and thoughts. I contacted Mary, mother of… well that part of the plugin and she let me know that the to_form=”“ functionality hadn’t been intended that way, but that the following php would suffice.

I have this in my to_form:

<code><txp:php>echo $GLOBALS[‘thisarticle’][‘email-address’];</txp:php></code>

So that all my stuff looks like this now:

form = Contact
<code>
<h2><txp:title /></h2>
<txp:zem_contact to_form=“to_form” >
<txp:zem_contact_text label=“name” />
<txp:zem_contact_email /><br />

<txp:zem_contact_text label=“Phone” min=7 required=“no”/><br />
<txp:zem_contact_textarea label=“Message” /><br />
<txp:zem_contact_submit label=“send your message” />
</txp:zem_contact>
</code>
form=to_form

<code><txp:php>echo $GLOBALS[‘thisarticle’][‘email-address’];</txp:php></code>

Once again, this allows me to have a contact form as an article which can have an email address passed to it, which is a workaround for not having a dropdown list of possible mail_from sources.

The email address is passed from a custom field in the article named “email-address”

Hope that helps someone.

Last edited by ma_smith (2006-02-24 05:28:40)

soulship · 2006-03-03 22:18:01

Hey everybody!

I just switched over to this version from one that I had hacked up about a year ago. I am trying to adjust the code to allow me multi word entries in a select list and I am realizing how rusty my php is (not that it was ever extraordinary) after not hacking on anything in a while.

As it is now I am having to use:

Which gets parsed but it is not to pretty. Any suggestions are most appreciated as usual :)

Hmmmmmmmmm looks like the forum is a little wonky after the upgrade.

TEST

Last edited by soulship (2006-03-03 22:38:10)

jamiew · 2006-03-04 00:32:07

I hacked file uploads and a some nice article-creation code onto this plugin for Medium NYC — it’s on the Submit Work page — and am curious if I should branch this out as a seperate plugin or roll the changes (it’s a fair #) back to the zem_contact maintainers.

It’s pretty neat since it effectively allows people to post articles & upload files (both files and images) to a TXP-site w/o registering an account (!). Of course there’s lots of options for the article’s section, category, status (I have submissions all set to pending so that a mod must authorize them)… would other people have interest in this?

Ed: textiled the links

Last edited by jamiew (2006-03-04 00:33:52)

squaredeye · 2006-03-04 01:39:14

Jamie,
I’d personally submit it as a separate plugin.
I think zem_contact_reborn is already getting big. I’d be interested to see how other’s weigh in on that though? From the submit work page, it looks good :)

Textpattern CMS

Textpattern CMS support forum

#271 2006-02-15 11:38:51

Re: Plug-in: zem_contact_reborn

#272 2006-02-15 16:07:37

Re: Plug-in: zem_contact_reborn

#273 2006-02-17 18:38:16

Re: Plug-in: zem_contact_reborn

#274 2006-02-20 15:30:43

Re: Plug-in: zem_contact_reborn

#275 2006-02-20 15:33:40

Re: Plug-in: zem_contact_reborn

#276 2006-02-23 03:34:12

Re: Plug-in: zem_contact_reborn

#277 2006-02-23 12:11:00

Re: Plug-in: zem_contact_reborn

#278 2006-02-23 15:49:39

Re: Plug-in: zem_contact_reborn

#279 2006-02-23 15:58:27

Re: Plug-in: zem_contact_reborn

#280 2006-02-23 16:33:26

Re: Plug-in: zem_contact_reborn

#281 2006-02-23 16:41:39

Re: Plug-in: zem_contact_reborn

#282 2006-02-24 05:25:37

Re: Plug-in: zem_contact_reborn

#283 2006-03-03 22:18:01

Re: Plug-in: zem_contact_reborn

#284 2006-03-04 00:32:07

Re: Plug-in: zem_contact_reborn

#285 2006-03-04 01:39:14

Re: Plug-in: zem_contact_reborn

Board footer