How can PHP developers ensure that their contact forms are secure and not vulnerable to spam bots targeting the mail.php file directly?

To ensure that contact forms are secure and not vulnerable to spam bots targeting the mail.php file directly, PHP developers can implement a CAPTCHA system on the form. This will require users to prove they are human by completing a simple task, such as typing out distorted text or solving a puzzle. By adding this extra layer of security, spam bots will be less likely to successfully submit the form. 

// Example code implementing CAPTCHA on a contact form
session_start();

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    if ($_POST["captcha"] == $_SESSION["captcha"]) {
        // CAPTCHA validation passed, process the form submission
        // Additional form processing code here
    } else {
        // CAPTCHA validation failed, display error message
        echo "CAPTCHA verification failed. Please try again.";
    }
}

// Generate random CAPTCHA code and store it in session
$captcha = substr(md5(uniqid(rand(), true)), 0, 6);
$_SESSION["captcha"] = $captcha;

// Display CAPTCHA image on the form
echo "<img src='captcha.php' alt='CAPTCHA'>";
echo "<input type='text' name='captcha' placeholder='Enter CAPTCHA code'>";

Keywords

PHP contact forms security spam bots mail.php

Related Questions