Soldato
So you're just trying to ensure that a quotation request you receive comes from a legit source? Then I'd suggest you're barking up the wrong tree in trying to ascertain if an email address is legit and have scripts try to filter and you'll end up going round in circles trying (and missing) things to check.
What I do is honey pot the living hell out of the contact form with logical assumptions based on how a human being would interact with a form, assemble data based on these assumptions and then have the server script throw a bounce message if something doesn't line up.
Things I check for include:
The server script will then send a response to the browser loading either the success page, or fail page if spam was suspected with the fall back option being a manual mailto: link if the script got it wrong. The server then just compiles a quotation request email with all the details to my quotations inbox.
It doesn't matter to me at this point if the email address is legit or not, what little junk gets through is easy to spot.
What I do is honey pot the living hell out of the contact form with logical assumptions based on how a human being would interact with a form, assemble data based on these assumptions and then have the server script throw a bounce message if something doesn't line up.
Things I check for include:
- Time between the form was instanced in the browser and the server request was received: bounce if it's below a certain logical threshold
- Whether any form controls were manually interacted with, i.e. a person has engaged with the form rather than a bot setting data: bounce if this interaction flag is not set
- Honey pot form fields that are invisible to normal users and screen readers but would still get filled in by a bot: bounce if these fields contain data
- Fully leverage HTML5 validation by setting the correct input type for form controls and applying validation RegEx patterns where necessary: modern browsers won't even submit the form if the validation fails in the browser
The server script will then send a response to the browser loading either the success page, or fail page if spam was suspected with the fall back option being a manual mailto: link if the script got it wrong. The server then just compiles a quotation request email with all the details to my quotations inbox.
It doesn't matter to me at this point if the email address is legit or not, what little junk gets through is easy to spot.
Last edited: