What is this that shows up in submitted forms?

Question

This is what shows up in my database when a user submits a
form. I have changed the links from http to hxxp, just in case:
First name:cpezcxuqaa
Last name:cpezcxuqaa
Can we contact you?:NO
Email:[email protected]
Address:xWPfxw <a
href=\"hxxp://ailmvbubfrny.com/\">ailmvbubfrny</a>,
[url=hxxp://zhxwtonobgcq.com/]zhxwtonobgcq[/url],
[link=hxxp://sfgnmxvtjzao.com/]sfgnmxvtjzao[/link],
hxxp://agslfyzgisey.com/
Date received:2009-04-01
Prayer Request:xWPfxw <a
href=\"hxxp://ailmvbubfrny.com/\">ailmvbubfrny</a>,
[url=hxxp://zhxwtonobgcq.com/]zhxwtonobgcq[/url],
[link=hxxp://sfgnmxvtjzao.com/]sfgnmxvtjzao[/link],
hxxp://agslfyzgisey.com/

Answer 1

RobertBoy wrote:
> I figured it was spam and generated by a spambot, but
what purpose does it
> serve? Does someone just enjoy harassing others or is
there some gain to be
> had by doing this? By the way, I've heard of honeypot
and captcha before, but
> have not been anxious to use them because I sometimes
struggle to read those
> funny shaped words and usually try a few times until I
get one I can actually
> read.
Honeypot doesn't use funny words, it uses a form field that
is hidden by
CSS. Formbots don't read CSS so carry on seeing the form
field and puts
junk in it. Your form processor will only process the form if
that form
field is blank, or has a fixed value. I use 2 in my forms,
one with
fixed value, and with no value, seems to work fine to prevent
formbots,
but it wont stop a spammer manually entering the spam. It
also wont stop
persistent spammers from figuring out how it works, but that
only
happens on high profile/volume sites.
Most of these formbots were used to inject there links into
comments
that were automatically displayed on websites. This would
boost the
search ranking of the sites they list, and possibly if
someone was silly
enough to click the link, infect someone with a virus/spyway
that would
make that computer a clone so be used as a formbot.
The thing is, loads of individuals try to exploit forms, so
most of the
junk you see is a test, to see if your form can be exploited.
When they
realise they cant they generally move on and someone else
tries the same.
Dooza
Posting Guidelines
http://www.adobe.com/support/forums/guidelines.html
How To Ask Smart Questions
http://www.catb.org/esr/faqs/smart-questions.html
How To Report A Bug To Adobe
http://www.adobe.com/cfusion/mmform/index.cfm?name=wishform