Problems with [url/ [http etc

Is there a reason why validation wouldn't be working for the likes of the following, even though we have them specified in our "restrict content" behaviour?


[etc]

Here's the kind of thing that keeps slipping through our client side validation:

Name: mcseictbmk
Email: tifcxykoad@erkuqx.com
Telephone: fxlgvnrb

Subject: flioezc xodtcbg

Enquiry: zijoosxtnzfxyibcqaiv, http://www.omuvybtayc.com">xzbvsisopq , pcvddzehst, www.kjgsttgcnu.com xzbvsisopq

These are starting to become really tiresome. How do I lock down my form to prevent this type of submission?

I'm not sure I totally understand, is the problem with web addresses being included in the email?

Or is other content the issue? which specific content in the email is the problem?

Can you send a copy of the page so I can see how you have configured the validation to see what may be going wrong.

It's the form content that's causing a problem. We've set up validation to exclude any version of http:// url:// [url:// [http:// etc but our client is still being bombarded with emails such as...

From: aacgqdpvbq@gjgjgf.com
To: info@countryhousehotelscotland.com
Sent: Fri 01/04/11 6:49 PM
Subject: Fwd: Enquiry from the Trigony Hotel web site
Name: pigohkspwp
Email: aacgqdpvbq@gjgjgf.com
Telephone: pzjjjggm

Subject: sdkrisw xbixqkj

Enquiry: spcvpluazfcrcrtnajvo, http://www.fohnfrhuzc.com">fpbwvsdqpq , owoecwdipf, www.wndwtsqqyt.com fpbwvsdqpq

I've attached the contact page for you to have a look at. This is a problem across the board with all of our clients who we use Validation Toolkit with though.

We get the impression that the spammers have found a way around the Validation Toolkit script.

Hope you can spot what's wrong. Thanks.
Nath.

Well, part of the problem is you are using Client side validation.

It is very simple to get around client side validation. Client side validation uses javascript and is performed in the clients browser. To get around client side validation, you simply turn of javascript in the browser settings.


you should use server validation instead.

What is the point of client validation if it can, so easily, be avoided?

to provide the user more instant feed back on issues with the form input before the form is submitted.


you should always use server side validation as a follow up to client side validation.