I have been testing with this module, and as a result I now have several useless forms (or Form Names).  Is there a way of getting rid of these?  I do not see a delete option anywhere.

jvanschaijik,

The “forms” are sort of virtual… in a sense that they don’t actually exist anywhere, but are groupable.
If you go to the Freeform CP and click one of the form Names:

CP Home › Modules › Freeform › Home

It will then list all “Freeform entries” belonging to that group. You can “tick” off all the boxes on the left, and click delete. That will remove the entries, and if all entries from a “group/form name” are removed, the form name will no longer exist

Thanks Pie Man,

Your instructions worked well with one group (or form name).

But when I clicked on the next form name (which has one entry) I got this error message: “Invalid GET Data”
Then I clicked on yet another form name (which, according to the list I see in the CP, should have 1 entry) and was told “There are currently no entries.” And since there are no entries, I cannot delete them.

Any ideas?

Hmmm.... that’s strange…

What happens if you access it a different way - via the Manage Entries tab:

CP Home › Modules › Freeform › Manage Entries

That worked like a charm.  In each case I found the one entry, deleted it, and now the form name has disappeared as well.  Thank you!

You’re welcome

Shouldn’t have happened though… unless it was just an obsure quirk.
I wasn’t able to duplicate this either…

I got the same issue with “Invalid GET Data”. EE 2.6.4 (recently upgraded from EE 1.5.something) and Freeform 2.6.5.
Just FYI.

Also another issue - somehow bunch of weird forms appeared in my modules/freeform CP. Some of them give me “Invalid GET Data”, some just turn 0 entries and I can’t delete them. And thoughts how to fix this?..

Noir - 29 July 2008 01:16 PM

I got the same issue with “Invalid GET Data”. EE 2.6.4 (recently upgraded from EE 1.5.something) and Freeform 2.6.5.
Just FYI.

Also another issue - somehow bunch of weird forms appeared in my modules/freeform CP. Some of them give me “Invalid GET Data”, some just turn 0 entries and I can’t delete them. And thoughts how to fix this?..

What happens if you access it a different way - via the Manage Entries tab:

CP Home › Modules › Freeform › Manage Entries

I can’t access it in different way, the form’s names are like:
x’ waitfor delay ‘0:0:20’--_in
and
opt_http://www.scanalert.com/help/scanner/5/rfi?

If I search entries with this name - I get 0 result.
And I really would want to know how those forms got there.

I think it might be some security issues? For example our hacker safe passes by required fields in forms and signs up with our news letter. They recommended to add “conditions” for the fields - like @ must be present in e-mail and such. Well...if you try to sign up with our news letter - you must enter e-mail that looks like name@mail.com, if you try entering something else - you’ll get an error.
My question is...how hacker safe does it? And what should I do to stop it?

Again - EE 1.64 and Freeform 2.6.5.

Thank you.

Noir,

Can I have a look in your CP?

Just PM me the details

Thanks

Oops, you reply too fast There is more in the previous post now.

Sorry, I can’t, it’s commercial website.

Btw, I also have Freeform Spam 1.0.2 installed.

Noir,

What are all those x’ waitfor delay ‘0:0:20’ forms?
Is that something you set… or perhaps that’s Freeform Spam?

I have no idea how it got there.
Maybe it’s spam, but then again - how can “it” create forms...by itself? Sending replies like comments and sign-up for stuff is understandable. But creating forms? It looks like a huge hole in security.

I read these forums for few hours and thought about installing captcha, but my boss doesn’t want it, so I need to find another way >.>

Noir,

PieMan asked that I have a look at this thread.

The form name is dynamic in Freeform as PieMan indicates above. It is set by the value you place in the form_name parameter in the exp:freeform:form tag. That parameter in turn gets turned into a hidden field in the form. The form name you provide becomes the value of the form_name hidden field. When the form is submitted Freeform stores that form name and then uses it to organize things in the CP.

A hacker can sometimes alter the value of the form_name field or even create an altogether separate form that posts to your site. EE has security provisions in place that Freeform relies upon that should help keep your site more safe. Still, hackers are always looking for new ways to get at you.

Do you have Process Data in Secure Mode set to yes on your site by the way?

mk

Hello Mitchell
I’m leaving on vacation for two weeks, so until I come back I’m not going to look into this issue.

Thanks for the replies, I’ll be back ))