4 ms·

Have you ever seen anyone do that though? The only real solution is not allowing contact form emails to be customized with free text input. I guess you could

Have you ever seen anyone do that though? The only real solution is not allowing contact form emails to be customized with free text input. I guess you could have a manual approval loop for "weird" names (more than 30 characters, has a dot in it, etc) or other signs of spam. It would still leave some space for spamming though (I can't imaging a rule that stops "Buy More ETH" but doesn't stop any unusual real name).

rtkwe 4y ago
> Have you ever seen anyone do that though? I don't know I haven't really probed random contact forms to see if they block this kind of thing. There's a lot more to do to block this kind of proxy spam entirely for sure I was just talking about the particular problem of using the contact for to send to an mailing list.
- jrumbut 4y ago
  It's definitely evil genius stuff. I'm sure enough organizations have a mailing list called "customers@company" or "clients@company" to make it worth a shot. Colleges probably have "students@school" or "faculty@school" list. Might be enough names you can profitably do it by hand.