Simple Contact Form ‘ghost’ enquiries

[sly]

Hi,

I downloaded and used the excellent ‘Simple Contact Form’ from the CSS-tricks site: https://css-tricks.com/nice-and-simple-contact-form

But am finding that occasionally I get a ‘ghost’ enquiry with no fields filled in. This is odd because the contact form has validation enabled, so a user can’t send the form without filling out the fields.

What I think is happening is that a bot (or similar) is reading the contactengine.php document and causing it to fire off the form. If I browse to thesite.com/contactengine.php it does indeed redirect me to the ‘thanks’ page and I then receive the email a few moments later.

Is there a way to stop this happening?

[sly]

Thanks, that’s a good idea.

I was also thinking that perhaps I could bring the contactengine.php outside the root level, not sure if that’s possible, but will check.

Thanks again.

[Author]

Posts