Block extra-US contact form submissions

Toward #371.
openva · May 28, 2020 · 83b553d · 83b553d
1 parent c9f45de
commit 83b553d
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/htdocs/contact.php b/htdocs/contact.php
@@ -84,6 +84,23 @@ function show_form($form_data)
 if (isset($_POST['form_data']))
 {
 
+    /*
+     * Block non-US IPs. (This is where most spam comes from.)
+     */
+    $url = 'http://ip-api.com/json/' . $_SERVER['REMOTE_ADDR'];
+    $json = get_content($url);
+    if ($json !== FALSE)
+    {
+        $ip_data = json_decode($json);
+        if ($ip_data !== FALSE)
+        {
+            if ($ip_data['countryCode'] != 'US')
+            {
+                die();
+            }
+        }
+    }
+
     # Give spammers the boot.
     if (!empty($form_data['zip']))
     {