plugins - How can i seelog all requests coming from a registration form (not from the UI)?

admin管理员组

文章数量:1168529

I am talking about the REGISTER form

PROBLEM: I have some requests that are coming from somewhere else - not from the user interface. I know this, because these requests don't have all the mandatory fields completed - and this can't be done from the user interface, because of the data validations (for example, you can't submit the form without a name, or without a valid email address)

I suppose this is a security vulnerability, and I've heard someone can gain admin access through these requests.

QUESTION: Is there any way(a plugin maybe) I can log and parse these requests, in order to understand who/what/why/how is creating them? MORE EXPLANATIONS if needed: each time a user submits this register form, I get an email with details (name, email, period, choosen price). But sometimes, i get emails without all the mandatory details: for example: an email with no price or with no email... and this is theoretically not possible. how are these made, and why? is there any way to log these and see WHERE are they coming from?

I am talking about the REGISTER form

PROBLEM: I have some requests that are coming from somewhere else - not from the user interface. I know this, because these requests don't have all the mandatory fields completed - and this can't be done from the user interface, because of the data validations (for example, you can't submit the form without a name, or without a valid email address)

I suppose this is a security vulnerability, and I've heard someone can gain admin access through these requests.

QUESTION: Is there any way(a plugin maybe) I can log and parse these requests, in order to understand who/what/why/how is creating them? MORE EXPLANATIONS if needed: each time a user submits this register form, I get an email with details (name, email, period, choosen price). But sometimes, i get emails without all the mandatory details: for example: an email with no price or with no email... and this is theoretically not possible. how are these made, and why? is there any way to log these and see WHERE are they coming from?

• plugins
• wp-query
• forms
• security
• request-filter

Share Improve this question edited Mar 2, 2015 at 7:49 Testing_Enthusiast asked Feb 23, 2015 at 10:29 Testing_EnthusiastTesting_Enthusiast 133 bronze badges 3

• This is Contact Form 7. 3rd party plugins are off-topic. Contact the developer. – TheDeadMedic Commented Feb 23, 2015 at 10:58
• Someone is sending spam using your Contact Form 7 form. You don't really have any control over this. Usually spammers hijack servers and use them for sending spams so practically you cannot block these submissions. But instead you can try to identify legit submission from bogus submissions. One solution would be to check refer url. Usually spam bots do not have any refer URL so you can block such requests or emails. Contact Form 7 have Akismet integration that you can use. Third, you can install a captcha too. You will not get more help for this plugin here since it's 3rd party plugin. – Robert hue Commented Feb 23, 2015 at 11:00
• thanks a lot! but are these spams getting to me automatically and random, or someone is targeting specifically my website? AND how can i check for the refer url, because I'm not getting it in the emails? thanks again! – Testing_Enthusiast Commented Feb 23, 2015 at 11:21

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

You could use "save_post" hook to capture all submit within WP, for ex:

function just_got_you( $post_id ) {
    if ($post_id != '123')
        return;

    << do your logging stuff here >>

}
add_action( 'save_post', 'just_got_you', 10, 2 );

Change 123 to your page/post id. More reference here Save Post Hook

本文标签： pluginsHow can i seelog all requests coming from a registration form (not from the UI)