Trying to hack a site through a feedback form? what to do?

Question

Burglary protection

The site consists of a couple of pages in php (two landing pages), there is a feedback form, and hundreds of requests per minute from some bot arrive through this form. The query strings are something like this, there are a bunch of different ones:

<IMG SRC=javascript:alert('XSS')>

javascript:/*</script><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+((new(Image)).src=([]+/\

%{(#[email protected]@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container

Regular shared hosting on php 5.6

How can you cut off such requests without setting captcha, and is it not a problem to bypass captcha now?
IP this spammer also changes constantly..

Answer 1

Install clodfire. It will automatically add the captcha.

Answer 2

fail2ban