diff --git a/sms_contact/index.php b/sms_contact/index.php index 1716c52..d24f231 100644 --- a/sms_contact/index.php +++ b/sms_contact/index.php @@ -27,11 +27,12 @@ if ($_POST) { $balance = $sipgate->getBalance(); $message = str_replace("\r", "", trim($_POST['message'])); $blacklist = read_blacklist($config['blocked']); + $delta_t = 60*5; if (!isset($_POST['message'])) { throw new Exception('Keine Nachricht!', 5); } - if ($_POST['antispam'] != md5($message)) { + if ($_POST['antispam'] != md5($message . ceil(time() / $delta_t))) { // check hash throw new Exception('Willst du mich bescheissen? Bitte aktiviere Javascript!', 1); } if (strlen($message) > 160) { diff --git a/sms_contact/js/sms.js b/sms_contact/js/sms.js index 3f2de00..a395f42 100644 --- a/sms_contact/js/sms.js +++ b/sms_contact/js/sms.js @@ -20,8 +20,9 @@ function update_length(msg) { } function send(frm) { + var delta_t = 1000*5*60; // vadility of hash in seconds frm.message.value = frm.message.value.trim() - frm.antispam.value = hex_md5(frm.message.value); + frm.antispam.value = hex_md5(frm.message.value + Math.ceil(new Date().getTime() / delta_t)); if (frm.message.value.length > 160) { alert('Message is too long!');