Question

i have a webshop running, and every couple days an empty mail is send, like an order. Is this most likely google?

I have a file called send2.php, it takes all info from session, all post data, and sends it via mail. after that it redirects to a “thank you” page.

Can and will google send empty forms just to see whats in send2.php? What would be the best way to prevent this from happening?

Answer 1

If the mail your receiving is blank values as the values have not been set throughout the session then, why dont you check for those values before sending the mail, its true that the culprit is most likely a crawler, and many of them (inc bingbot) will not listen to a robots.txt file, plus a robots file is the first place a hacker looks for for info gathering.

<?php 
if(!empty($_SESSION['some_info'])){
    mail(...);
}
?>