Welcome Guest, Not a member yet? Register   Sign In
InvalidChars Filter - turn off logging?
#3

(11-30-2023, 08:25 AM)captain-sensible Wrote: i did my own simple class to remove chars and if they put a http link in the form it normally means their trying to sell something so i brush that off the a spam form and in that  case the mesage doent get sent . 

try  typing in    viagra into  contact form of this site and see what happens https://andrinaboutique.com/

Yeah I feel you and could do something similar.

I mostly turned on InvalidChars filter tho because I got someone running a tool on every input on my site using all sorts of strange characters to try and find vulnerabilities. Since I enabled this filter it's completely stopped it.

Can you share your filter for invalid chars? Maybe it's similar to the one CI provides.
Reply


Messages In This Thread
RE: InvalidChars Filter - turn off logging? - by CIDave - 12-01-2023, 02:59 AM



Theme © iAndrew 2016 - Forum software by © MyBB