I have a simple Formit form [[+name]], [[+email]], [[+text]]. It works fine when I try to use it on a website.
However I (form recipient email) receive mysterious messages that come FROM an admin email address (admin email address for this MODX installation!). These messages formatted like my quick email chunk, have a correct subject line (as specified in Formit code) but there's no user data, just Formit placeholders as in a code chunk. The messages look like this:
Inquiry from: [[+name]] ([[+email]]) Message: [[+text]]
Formit code is here:
[[!FormIt? &hooks=`spam,email,redirect` &emailTpl=`message-tpl` &emailTo=`[email protected]` &emailSubject=`A mail from my site` &redirectTo=`1` ]]
So the questions - where are these coming from and why? Is it a security risk, spam related, do I loose my mail?
Please help
!]]>[[FormIt?... .. &emailFrom=`[email protected]` &emailFromName=`the Website name` .. ]]
maybe you can add some validation in the form before it's able to be sent, like:
[[FormIt?.. .. &validate=`name:required:minLength=^3^, email:email:required, fakefield:blank` .. ]]
These emails come periodically 2-3 a day since website launch a week ago. There were only couple proper emails (from real users). Also, this is not my first MODX website; I've done dozens. I often re-use the same form code (most sites are similar in structure/purpose). There's no such a problem on other sites.
Here is the form page http://markusrutzmusic.com/contact-and-booking.html
This is my main concern:
Quote from: BobRay at Dec 01, 2017, 02:19 AM
OTOH, I guess it could be someone trying to hack your FormIt email form, though I don't think that's likely.
I wonder if someone had a similar experience and what can be done to enhance security of your Formit form.
Thanks]]>
Lots of email extras will use the emailsender System Setting if they get a blank "email from" address.
OTOH, I guess it could be someone trying to hack your FormIt email form, though I don't think that's likely.
]]>