Form Wizard Pro - Append HTTP headers

This is a forum to suggest new features for mojoPortal. 

This thread is closed to new posts. You must sign in to post in the forums.
1/3/2013 10:29:57 AM
Gravatar
Total Posts 76

Form Wizard Pro - Append HTTP headers

Hello,

I use the form wizard pro on the contact us page of our site. Recently, someone has just sent very abusive emails repeatedly through the form despite the presence of the captcha and the ip address seems to be some opera mini proxy.

I contacted Opera and here is their response :

==============


Thank you for contacting Opera Software's abuse department. The IP address referred to in your report is one of many used by Opera Mini, a mobile browsing service: <http://www.operamini.com/help/faq/> Opera Mini works as a web proxy for a large number of mobile users. All requests are sent through our network in such a way that it looks to the web servers that the users are coming from certain IP ranges, while in reality these networks are only used for transit. The true source IP of clients that connect through the Opera Mini service is announced in the HTTP header named X-Forwarded-For, which is included with every HTTP request. This header is the de facto standard for proxy servers. More information can be found here: <http://dev.opera.com/articles/view/opera-mini-request-headers/> <http://en.wikipedia.org/wiki/X-Forwarded-For> The X-Forwarded-For header will reveal which ISP the request originates from. However, since our users are mobile clients, we are unable to follow up abuse reports with the originating telecom operator. Doing so would ultimately require disclosure of protected private information, and would thus need to be pursued through formal legal channels. We can provide you with contact information to the appropriate instances upon your request. Have a nice day.

-- Kind regards,

Christer

Opera Software Abuse Department <http://www.opera.com/>
 

==============

Is it possible to provide an option to include the http headers so that we can track people who anonymously misuse the form?

 

Thanks.

1/3/2013 12:17:02 PM
Gravatar
Total Posts 18439

Re: Form Wizard Pro - Append HTTP headers

My advice would be to consider logging the request headers in iis logs, then consider the possibility of blocking requests based on the specific value of that header, but be careful because request headers can be spoofed.

Its a dificult problem if you can't just block by ip address but it isn't a problem that I expect to solve within Form Wizard Pro.

Best,

Joe

1/7/2013 9:41:32 AM
Gravatar
Total Posts 76

Re: Form Wizard Pro - Append HTTP headers

Thank you for those tips Joe. They are helpful.

You must sign in to post in the forums. This thread is closed to new posts.