Latest Update Responsible for Massive Form Spam

Since I updated clients to the new version of Balbooa Forms, they are getting repeated spam forms sent through. This has never been an issue on other versions, they all relate to spam since the update applied yesterday.

It seems they can bypass any required field.

The clients just receive the "message" part and nothing else:

"system(base64_decode("ZWNobyBCQUZSRUNPTjUzQ0ZCQjg5QzJDOTsgZWNobyBCQUZSRUNPTjUzQ0ZCQjg5QzJDOV9FTkQ=")) . ""

Hopefully there's an update to address this. This is the 2nd Balboa update which has caused issues, the one previously miscalculated product values. Please test the updates before releases more thoroughly.

Replies are visible only to logged in members with an active subscription.