How can i see/log all requests coming from a CONTACTfrom7 form (not from the UI)

  • I am talking about the REGISTER form at the bottom of this page: https://altom.training/bbst-foundations/

    PROBLEM: I have some requests that are coming from somewhere else – not from the user interface. I know this, because these requests don’t have all the mandatory fields completed – and this can’t be done from the user interface, because of the data validations (for example, you can’t submit the form without a name, or without a valid email address)

    I suppose this is a security vulnerability, and I’ve heard someone can gain admin access through these requests.

    QUESTION: Is there any way(a plugin maybe) I can log and parse these requests, in order to understand who/what/why/how is creating them?

    MORE EXPLANATIONS if needed: each time a user submits this register form, I get an email with details (name, email, period, choosen price). But sometimes, i get emails without all the mandatory details: for example: an email with no price or with no email… and this is theoretically not possible. how are these made, and why? is there any way to log these and see WHERE are they coming from?

    also check this screenshot of a valid and invalid confirmation email i get: https://i59.tinypic.com/10n6wio.jpg
    THANK YOU in advance!

    https://www.ads-software.com/plugins/contact-form-7/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Takayuki Miyoshi

    (@takayukister)

    I checked the screenshot and the both of the messages seem valid. Why do you think the right side is invalid?

    Thread Starter testing_enthusiast

    (@testing_enthusiast)

    because it has a field COUNTRY – which is left blank. and that field is automatically getting a user’s country by ip, or if it doesn’t find one it puts GLOBAL there. and i suppose – in the case of a spam bot or some other kind of attack, that script is not runned – therefore nothing in the COUNTRY field

    Plugin Author Takayuki Miyoshi

    (@takayukister)

    So, the problem was a form submission happened in a client environment that was not JavaScript-enabled? Sounds like it has nothing to do with Contact Form 7.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘How can i see/log all requests coming from a CONTACTfrom7 form (not from the UI)’ is closed to new replies.