We have a form on our website that is really the lifeblood of our website - and it's been working perfectly.  Except in the past two days we have received 3 separate responses that are highly strange.  They're all very similar but slightly different.  We're not sure if they're from a technical bug or a prankster, but they make us worried because we need our form to work 100% perfectly.  Has anyone seen anything like this (see below)?  Is it just a weird prank, or is there something wrong with our CGI script or settings.  BTW, whenever we test the form from any computer, it works perfectly for us.

Here are two of the strange responses, so you can get the idea.  The field names all precede the colons:

Below is the result of your feedback form.  It was submitted by
pdbzingrcd (deorjx@nnzjze.com) on Wednesday, June 18, 2008 at 13:14:23
---------------------------------------------------------------------------


PlaceName: pdbzingrcd

DigsLocation: xDqbophooPgLGXRTZ

trip_date_month: 11

trip_date_year: 2003 or Before

Othertext: UvtDbikdVAXVH

Whysodarngood: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

Location: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

Room: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

Food: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

Vibe: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

KeepinMind: HGlmob  <a href="http://shhyqwcwrcgu.com/">shhyqwcwrcgu</a>, aeqxueqpxbju, [link=http://xkofslqwzvvx.com/]xkofslqwzvvx[/link], http://ulufnugkywzw.com/

Home: IgXPjKrmYx

Age: 46-65

---------------------------------------------------------------------------

AND THE SECOND STRANGE RESPONSE:

Below is the result of your feedback form.  It was submitted by
fvdlvfaxntv (jjnenw@lznwqb.com) on Friday, June 20, 2008 at 09:12:55
---------------------------------------------------------------------------


PlaceName: fvdlvfaxntv

DigsLocation: DbzuDZhAkih

trip_date_month: 8

trip_date_year: 2007

Othertext: cnWrTMJnAhV

Whysodarngood: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

Location: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

Room: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

Food: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

Vibe: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

KeepinMind: 1ezIoq  <a href="http://gahrzewfvtlj.com/">gahrzewfvtlj</a>, xkyuoeautpfc, [link=http://tzosqswivkva.com/]tzosqswivkva[/link], http://hjulniytthey.com/

Home: QqBDBtIpFhJnlVqdvR

Age: -25

---------------------------------------------------------------------------

 

Could be, but would a spammer come to our website and fill out the form?  Because all the field names are correct - it looks exactly like any other form response we receive in our email inbox, except it's weird - with all those letters, with a fake email address, and weird html script. 

Great.  That makes total sense.  I didn't realize that spammers could run scripts like that - without actually vistiting our website in person.  Is there a way to block that kind of spam - or is it just something we should expect, and disregard?

Thanks so much!

hey katrina, how about plugging someone who's been an LP customer for five years?

http://www.notonebit.com/projects/killbot/

Could be a site coming in the future and the spammer planting seeds or an old script being used with a dead site. Spammers aren't the brightest bulb in the chandelier.