Well before i continued anymore on my script i thought i would get the community to test it out its a form mailer called Rizo contact form mailer v1.5 its very useable now except i have not finished all the features all though i will list a few features below.

 

 

 

1.Known robot blocker

2.Header/javascript injection protection

3.Bad word blocker

4.Changeable settings from settings file

5.Spam word filter

6.Basic captcha and recaptcha

7.Easy to edit language pack

8.Ip address blocker

9.And more that i won't list currently

 

EDIT:Please note i've included both recaptcha keys private and public for you to be able to test recaptcha these keys will only work on localhost so be sure to sign up for your own keys once you put the contact form online you may change these keys to your own keys in the settings.php file

 

 

Anyways just test it out and let me know what u think or what i need to fix, to use the form just fill in your mailing info in settings.php cheers if you like my work feel free to give me a +1

Rizo Contact v1.5.zip

Google failed me - could you provide a link?!

If you've posted one, give me a minute to wake up...

 

EDIT: Attachment definitely wasn't there before

 

EDIT2: Nice, I couldn't break it after a few minutes Good luck with it.

Edited March 23, 201016 yr by andyl

Google failed me - could you provide a link?!

If you've posted one, give me a minute to wake up...

 

EDIT: Attachment definitely wasn't there before

Eh yea sorry bro i had to go back and edit lol forgot to add attachment

Google failed me - could you provide a link?!

If you've posted one, give me a minute to wake up...

 

EDIT: Attachment definitely wasn't there before

 

EDIT2: Nice, I couldn't break it after a few minutes Good luck with it.

 

Thanks

 

EDIT: I will keep you updated with any changes or updates on the script through this post

I've noticed something that you've missed. The following piece of code would still be rendered by the browser and will slip straight through your net:

%3Cscript%3Eevil_xss_code()%3C/script%3E

To get around that, just before you use strip_tags(), put your string through rawurldecode()

 

It's also worth noting that strip_tags() will only remove the tags themselves, not the content within them. I don't know if the contents are still dangerous without the tags, but I personally prefer using a regular expression to remove everything between open and close tags:

$string = preg_replace('/<.+>/', '', $string);

I've noticed something that you've missed. The following piece of code would still be rendered by the browser and will slip straight through your net:

%3Cscript%3Eevil_xss_code()%3C/script%3E

To get around that, just before you use strip_tags(), put your string through rawurldecode()

 

It's also worth noting that strip_tags() will only remove the tags themselves, not the content within them. I don't know if the contents are still dangerous without the tags, but I personally prefer using a regular expression to remove everything between open and close tags:

$string = preg_replace('/<.+>/', '', $string);

 

Ok thank u u get a +1 for just pointing that out to me cheers

 

EDIT:Ok updated the functions.php file to include the above suggestion