Form validation

My client is currently experiencing emails being exploited when sent to them as a result of the completion of their
contact form. Although the form has certain "required" fields these are being by-passed and
spurious comments are being entered into the notes field. I was advised to put a checkbox field
on the form as they" Cannot be completed by a bot". When I use the form the verification works and
if you do not check this box you are advised accordingly.

I attach an image of a typical form submission from these individuals and am anxious to find a solution
that prevents such abuse.

Any ideas would be appreciated.

Are you using server validation on the form?

it is easy to pass client side validation. you should have server validation in place.

Also double check that the Server Validation server behavior and the Universal Email server behavior are using the same trigger. If they use different tigers it may be possible to by pass server validation but still trigger universal email. using the same trigger for both will mean that if one is bypassed, both are bypassed.

Hi Jason

No I was simply using client side validation as I am unfamiliar with server side validation. I wan't to stop people entering URLs into a textarea box
and saw a suggestion that making it alphanumeric would solve this problem. I selected the textarea field and selected alphanumeric as the validation type but do not know what to enter in the server variable or the drop down "+" menu. Can you advise what I need to enter? Also is there an explanation on your web site as to what the different server variables mean and how and when to use them? I have attached a screenshot to show you where I am stuck. Your assistance would be much appreciated.

Click the lightning bolt icon to open the bindings page, from the bindings collection, expand the form and select the corresponding form element.

the variable types of server variables are:

FORM
URL
SESSION
SERVER

when using form validation, you will be using the form variables most of the time.

URL variables would be mostly used for redirects and session variables are mostly used for security.

From your screen shot it looks like contact is the name of your form.

Expand the contact section, the select the form element you wish to validate.