Is there an e-mail service that confirms an e-mail before forwarding?

[darrenforster99]

I look after a website for a charity, and that charity has a problem that they keep getting spam messages through their contact form, and they've asked me to look into it to see if I can do anything.

My first plan was to add a captcha into the contact form, but unfortunately the site uses a CMS developed by the host and the host won't let me go in and add my code to his CMS to add a captcha (right pain in the backside really).

We have asked him if he could add a captcha himself, but that is about as far as he's got,

Anyway just thinking of a solution and I thought the only thing we can change is the e-mail address the system sends the contact us box to.

I'm wondering if there is any e-mail service we could send the e-mails to that would act like a "holding pen" and send out a "please click to confirm you are a real person" type e-mail to their e-mail address, and once they've clicked the confirm their e-mail gets sent through and they get added to the white list, otherwise if they don't click within so many days their e-mail gets treated as spam.

I know we can do it with PHP and SQL but on this site we have no access to run any PHP or SQL - the only person who can create new PHP is the host and he wont let us have access to it which is a bit of a pain in the backside.

[Kevy]

But here's the bad new...

Spam can come from actual email accounts ...

My email address is KevyTeky@yahoo.com

Anyone can use that email address to send an email to any POP account.

Remember this... SMTP (send mail to people {simple Mail Transfer Protocol}) doesn't need authentication... not even a client... just Internet...

So you can confirm an email address to see if its real... but doesn't mean that it came from that person or client's network.

The best you can do is run a Spam Filter that filters emails before they reach your email Domain...
Google offers one...
Symantec...
Barracuda...
and many other security agencies.
-----------------------------------------------------------------------

With that in mind... you can catch emails and get their from headers by sending them to your mx.mail.record (holding pen) first then send/release (to actual mail server) only to the confirmed accounts...
Or you can take the email address they used from the site... (catch it in a variable, and send to a confirmation function which sends an email to that account and when approved email comes back adds them to a "Approved Sender List"... now your the holding pen, and only delays for a bit, until confirmed.

You can set up your mail server to only receive connections from your website's (where the email is sent from) Ip address. This is because most spammers wont even send it from your website... They are actually using a mass emailing client from their own networks. (this only will work if your hosting your own mail server)

[Jacob]

You're probably referring to a service like Are You a Human. It's a great, free way to prevent spam.