Mail() Funktion wird mißbraucht?! auf meinem Server

ttc1974 · 28. Dezember 2010 um 11:12

Hallo,
ich habe ein Problem, in meiner Email Warteschlange in Plesk tauchen immer wieder solche Email’s auf:

[code]FAILURE NOTICE error@mailfrom.com Dec 27, 2010 09:18 PM 14:51:23 8,68 KB

Received: (qmail 28476 invoked for bounce); 27 Dec 2010 21:18:34 +0100
Date: 27 Dec 2010 21:18:34 +0100
From: MAILER-DAEMON@vps-10XX411-3XX5.united-hoster.de
To: error@mailfrom.com
Subject: failure notice
[/code]

und davon mehrere hundert

Dann habe ich in AWStats dieses hier gefunden: es werden ständig solche Link’s angesprochen:

also habe ich mir gedacht es muss irgendwo an dem Script des Kontaktformulars sein, kann mal jemand drüber schauen wo das Problem ist? das sowas passieren kann?

[code]//==============
//CONFIGURATION
//==============

//IMPORTANT!!
//Put in your email address below:
include (‘email.php’);

//User info (DO NOT EDIT!)
$name = stripslashes($_POST[‘name’]); //sender’s name
$email = stripslashes($_POST[‘email’]); //sender’s email
$phone = stripslashes($_POST[‘phone’]); //sender’s website

//The subject
$subject = "Anfrage Jacubowsky Homepage "; //The default subject. Will appear by default in all messages. Change this if you want.
$subject .= stripslashes($_POST[‘subject’]); // the subject

//The message you will receive in your mailbox
//Each parts are commented to help you understand what it does exaclty.
//YOU DON’T NEED TO EDIT IT BELOW BUT IF YOU DO, DO IT WITH CAUTION!
$msg = “Von : $name \r\n”; //add sender’s name to the message
$msg .= “e-Mail : $email \r\n”; //add sender’s email to the message
$msg .= “Telefonnummer : $phone \r\n”; //add sender’s website to the message
$msg .= “Betreff : $subject \r\n\n”; //add subject to the message (optional! It will be displayed in the header anyway)
$msg .= “—Nachricht— \r\n”.stripslashes($_POST[‘message’])."\r\n\n"; //the message itself

//Extras: User info (Optional!)
//Delete this part if you don’t need it
//Display user information such as Ip address and browsers information…
$msg .= “—User information— \r\n”; //Title
$msg .= “User IP : “.$_SERVER[“REMOTE_ADDR”].”\r\n”; //Sender’s IP
$msg .= “Browser Informationen : “.$_SERVER[“HTTP_USER_AGENT”].”\r\n”; //User agent
$msg .= "Herkunft : ".$_SERVER[“HTTP_REFERER”]; //Referrer
// END Extras

?>

<?php if ($_SERVER['REQUEST_METHOD'] != 'POST'){ $self = $_SERVER['PHP_SELF']; ?>

Kontakt

Haben sie eine Anfrage? Füllen sie nur dieses Formular aus und wir werden uns bei Ihnen melden:

<!-- Start HTML form -->
<form name="form" method="post" id="third" action="#"  class="niceform">
	<!-- Name -->
	<label for="name"><strong><span class="blue">*</span> Name : </strong></label>
		<input id="name" name="name" type="text" class="validate['required','length[3,-1]','nodigit']" size="20" />

	<!-- Email -->
	<label for="email"><strong><span class="blue">*</span> Email : </strong></label>
		<input id="email" name="email" type="text" class="validate['required','length[5,-1]','email']" size="20" />

	<!-- Website -->
	<label for="site"><strong>Telefonnummer : </strong></label>
		<input id="phone" name="phone" type="text" class="validate['phone']" size="20" />

	<!-- Subject -->
    <label for="subject"><strong><span class="blue">*</span> Betreff : </strong></label>
		<input id="subject" name="subject" type="text" class="validate['required']" size="20" />

	<!-- Message -->
	<label for="msg"><strong><span class="blue">*</span> Nachricht : </strong></label><br />
		<textarea id="message" name="message" type="text" class="validate['required']" rows="10" cols="30"></textarea>

	<!-- Spam Check -->
    <label for="spamcheck"><span class="blue">*</span> <acronym  title="[ Spam prevention ]"><strong>Captcha! Bitte rechne</acronym> : <span class="blue">2 + 3 = ???</span></strong></label>
		<input id="spamcheck" name="spamcheck" type="text" size="5" class="validate['required','number','spamcheck']" />

	<br /><br />
	<input type="submit" class="buttonSubmit" value="Senden!" />

    <!-- Niceforms: mouse over effect -->
	<!-- Do not remove the line below -->
	<div id="stylesheetTest"></div>

</form>

<?php } else { error_reporting(0); if (mail($to, $subject, $msg, "From: $email\r\nReply-To: $email\r\nReturn-Path: $email\r\n")) //Message sent! //It the message that will be displayed when the user click the sumbit button //You can modify the text if you want echo nl2br("

Versendet!!

Danke <?=$name;?>, Ihre Nachricht wurde gesendet!
Wir versuchen so schnell wie möglich Ihre Anfrage zu bearbeiten!

	</div>
   ");

   	else

    // Display error message if the message failed to send
    echo "
   	<div class=\"MsgError\">
		<h1>Fehler!!</h1>
		<p>Sorry <b><?=$name;?></b>, Ihre Nachricht konnte nicht gesendet werden! Versuchen Sie es später noch einmal!</p>
	</div>";
}

?>
[/code]

danke schonmal
gruß
Paul

CryNickSystems · 28. Dezember 2010 um 19:11

versuch’s doch mal so:

[code]//==============
//CONFIGURATION
//==============

//IMPORTANT!!
//Put in your email address below:
include (‘email.php’);

//User info (DO NOT EDIT!)
$name = mysql_escape_string(stripslashes($_POST[‘name’])); //sender’s name
$email = mysql_escape_string(stripslashes($_POST[‘email’])); //sender’s email
$phone = mysql_escape_string(stripslashes($_POST[‘phone’])); //sender’s website

//The subject
$subject = "Anfrage Jacubowsky Homepage "; //The default subject. Will appear by default in all messages. Change this if you want.
$subject .= mysql_escape_string(stripslashes($_POST[‘subject’])); // the subject

//The message you will receive in your mailbox
//Each parts are commented to help you understand what it does exaclty.
//YOU DON’T NEED TO EDIT IT BELOW BUT IF YOU DO, DO IT WITH CAUTION!
$msg = “Von : $name \r\n”; //add sender’s name to the message
$msg .= “e-Mail : $email \r\n”; //add sender’s email to the message
$msg .= “Telefonnummer : $phone \r\n”; //add sender’s website to the message
$msg .= “Betreff : $subject \r\n\n”; //add subject to the message (optional! It will be displayed in the header anyway)
$msg .= “—Nachricht— \r\n”.mysql_escape_string(stripslashes($_POST[‘message’]))."\r\n\n"; //the message itself