Brad Kent wrote:

> As far as I know, spammer's aren't scouring the web for feedback /
> contact-us forms. I moved to a "email form" and haven't gotten any
> spam from it. Likewise, I moved my employer's email to a "form" and
> they haven't gotten any spam either.


You don't understand, it's not you getting spammed, it's spammers using
you to spam others.

Old form mail scripts sometimes accepted the email address of the
recipient as a form variable. This made it very easy to use for
novices, because they didn't have to touch the script at all. They just
had to put the address in a hidden field or a select in the form.

The problem is, the spammers would exploit this by creating their own
version of the form. Then they run their spam list through your form
handler, not only using someone else's resources but letting them get
blamed for the spam.

You can use form mail scripts, but the addresses either have to be
hard-coded in the script or validated somehow.



Brian