Spam in the contact form

Question

Hello. I am suffering from spamming in my Portfolio contact form. I have already put the fields 'name', 'email' and 'message' as mandatory and with the tests I did, it is not possible to send without filling these fields. But every hour comes in my email that form sent only with the field completed email, are random emails. How do I make it stop? Is there any way to do it without putting Captcha on my form?

This is my form:

<form action="sendemail.php" method="post" id="contact-form" class="form-horizontal">
        <fieldset>
                        <div class="form-group">

                          <div class="col-sm-8">
                            <input type="text"  placeholder="Nome" class="form-control" name="nome" id="nome" required="Preencha o seu nome">
                          </div>
                        </div>
                        <div class="form-group">

                          <div class="col-sm-8">
                            <input type="text" placeholder="Email" class="form-control" name="email" id="email">
                          </div>
                        </div>
                        <div class="form-group">

                          <div class="col-sm-8">
                            <input type="text" placeholder="Assunto" class="form-control" name="assunto" id="assunto">
                          </div>
                        </div>
                        <div class="form-group">

                          <div class="col-sm-8">
                            <textarea placeholder="Mensagem" class="form-control" name="mensagem" id="mensagem" rows="3" required=""></textarea>
                          </div>
                        </div>
                 <div class="col-sm-8">
                    <button type="submit" class="btn btn-success">Enviar</button>
                      </div>

                    </fieldset>
                    </form>

And this is the file that sends the form:

    <?php
if(isset($_POST['email'])) {

// Debes editar las próximas dos líneas de código de acuerdo con tus preferencias
$email_to = "[email protected]";
$email_subject = "Contato | Meu Portfólio";
$email_from = "marciaprates.com";


// Aquí se deberían validar los datos ingresados por el usuario
if(!isset($_POST['nome']) ||
!isset($_POST['email']) ||
!isset($_POST['assunto']) ||
!isset($_POST['mensagem'])) {

echo "<b>Não foi possível enviar o formulário. </b><br />";
echo "Por favor, tente novamente!<br />";
die();
}

$email_message = "Formulário do meu Portfólio:\n\n";
$email_message .= "Nome: " . $_POST['nome'] . "\n";
$email_message .= "E-mail: " . $_POST['email'] . "\n";
$email_message .= "Assunto: " . $_POST['assunto'] . "\n\n";
$email_message .= "Mensagem: " . $_POST['mensagem'] . "\n\n";


// Ahora se envía el e-mail usando la función mail() de PHP
$headers = 'From: '.$email_from."\r\n".
'Reply-To: '.$email_from."\r\n" .
'X-Mailer: PHP/' . phpversion();
@mail($email_to, $email_subject, $email_message, $headers);

echo "<b>O formulário foi enviado com sucesso!</b>";

}
?>

<script>
  setTimeout('window.location.href="index.html"',1700)
</script>

Could someone please help me? I can’t take any more of these emails coming in every hour with just the filled email.

Answer 1

The isset(); check if the variable was started, even if it is empty it will be started, so always the condition you created will not work, what you can do is the following, change the isset(); one strlen();, for example:

<?php
if(strlen($_POST['email']) > 0) {

// Debes editar las próximas dos líneas de código de acuerdo con tus preferencias
$email_to = "[email protected]";
$email_subject = "Contato | Meu Portfólio";
$email_from = "marciaprates.com";


// Aquí se deberían validar los datos ingresados por el usuario
if(!strlen($_POST['nome']) > 0 ||
!strlen($_POST['email']) > 0 ||
!strlen($_POST['assunto']) > 0 ||
!strlen($_POST['mensagem']) > 0) {

echo "<b>Não foi possível enviar o formulário. </b><br />";
echo "Por favor, tente novamente!<br />";
die();
}

$email_message = "Formulário do meu Portfólio:\n\n";
$email_message .= "Nome: " . $_POST['nome'] . "\n";
$email_message .= "E-mail: " . $_POST['email'] . "\n";
$email_message .= "Assunto: " . $_POST['assunto'] . "\n\n";
$email_message .= "Mensagem: " . $_POST['mensagem'] . "\n\n";


// Ahora se envía el e-mail usando la función mail() de PHP
$headers = 'From: '.$email_from."\r\n".
'Reply-To: '.$email_from."\r\n" .
'X-Mailer: PHP/' . phpversion();
@mail($email_to, $email_subject, $email_message, $headers);

echo "<b>O formulário foi enviado com sucesso!</b>";

}
?>

<script>
  setTimeout('window.location.href="index.html"',1700)
</script>

Surely there are other ways to do it, but these days this is the one I think most practice in your case.

Test and see if it works as you need it.

OBS.: What you can also help block spam is to add one captcha to your form, so will avoid filling by robots.

Answer 2

Try changing the isset by strlen(), because isset only checks if it is already exists strlen( ) > 0 checks if the String is empty. But, the same idea is to use the Recaptcha.