This page documents the ATTACK_DETECTION_IGNORE_ERRORS configuration setting in FormMail.
Type Of Setting
ATTACK_DETECTION_IGNORE_ERRORS is an OPTIONAL setting, which means...
 |
OPTIONAL |
you can change this setting if you need to, but the default
value is fine for most
circumstances.
|
Précis
Controls whether to ignore certain errors that can be caused by attacks.
Description
Set ATTACK_DETECTION_IGNORE_ERRORS to true if you want FormMail to
treat certain errors (e.g. no recipients field) as a spam attack.
Spammers sometimes try to send you spam via FormMail by assuming
that FormMail will send you an alert if they don't fill some
fields correctly.
For data fields, you can ignore these errors by setting
ALERT_ON_USER_ERROR to false.
For other errors, however, set ATTACK_DETECTION_IGNORE_ERRORS
to true.
NOTE: do not enable ATTACK_DETECTION_IGNORE_ERRORS until you've thoroughly tested
your forms. The only way FormMail can tell you about faults in your
forms is with alerts.
When you set ATTACK_DETECTION_IGNORE_ERRORS to true, you won't get
some important alerts any more, so errors may be very hard to
figure out.
NOTE: that this setting is different from the other attack detections
in that the user is not redirected to an abuse message page.
This setting purely prevents normal alerts being sent to you for
certain types of errors.
define("ATTACK_DETECTION_IGNORE_ERRORS",false);
Examples
define("ATTACK_DETECTION_IGNORE_ERRORS",true);
See Also
ENABLE_ATTACK_DETECTION
ALERT_ON_USER_ERROR
ALERT_ON_ATTACK_DETECTION
|