which part of the code do you know, I may have it configured wrong cause the robots are definately on the attack.
There's a big difference with ONLY YOU receiving the spam attacks, or your form being used as a spam relay to shoot spam to OTHERS.
Are others getting spammed with your form that you know of?
If they aren't then your form is not being used as a spam relay, because the NMS FormMail prevents that.
The "
@allow_mail_to" config is one of the security measures the NMS FormMail script uses to hinder spammers/bots from doing email injection exploits.
The info found in the posts that I previously mentioned you to read, explains about how spammers use forms for email injection exploits quite well, and you'll probably understand better what I am trying to explain if you read through it all
I assure you, the NMS FormMail script is secure in NOT using your form as a spam relay and the only nuisance is that YOU (and/or the email addys of those in your .pl script to which you have assigned to receive the form submissions) will be receiving the submissions to which the spammers are
trying to inject malicious code, BUT they will be unsuccessful because you are using a secure form script (the NMS FormMail) which will NOT allow that to happen (they CAN'T forward spam to OTHERS using your form as a relay).
I can't explain it or be any more explicit than that, so hopefully that'll give you peace-of-mind in that regard
If you (and those you assign to receive the form submission) don't want to receive the "attempts"/spam, however, then you need to hinder the bots from filling out the form period, which then you need to use a CAPTCHA method for your forms. The NMS FormMail doesn't currently have a validation system for bot-form-filling, that I know of, anyway.
Dilber MC Theme by HarzeM