#987 stopping users entering urls into name, email, subject and messa…

src/WebApp/appsettings.json

@@ -6,14 +6,14 @@
     "CopySubmitterEmailOnSubmission": "true"
   },
   "SmtpOptions": {
-    "Server": "",
+    "Server": "www.test.com",
     "Port": "25",
-    "User": "",
-    "Password": "",
+    "User": "test",
+    "Password": "test",
     "UseSsl": "false",
     "RequiresAuthentication": "false",
-    "DefaultEmailFromAddress": "",
-    "DefaultEmailFromAlias": ""
+    "DefaultEmailFromAddress": "test@test.com",
+    "DefaultEmailFromAlias": "test"
   },
   "RecaptchaKeys": {
     "PublicKey": "",

src/cloudscribe.SimpleContactForm/Components/NoUrlAttribute.cs

@@ -0,0 +1,22 @@
+using System.ComponentModel.DataAnnotations;
+using System.Text.RegularExpressions;
+
+public class NoUrlAttribute : ValidationAttribute
+{
+    protected override ValidationResult IsValid(object value, ValidationContext validationContext)
+    {
+        if (value != null)
+        {
+            var stringToValidate = value.ToString();
+            var urlPattern = @"((http|https|ftp|file)://)?([\w-]+(\.[\w-]+)+)(/[\w- ./?%&=]*)?";
+            var emailPattern = @"^[^@\s]+@[^@\s]+\.[^@\s]+$";
+
+            if (Regex.IsMatch(stringToValidate, urlPattern) && !Regex.IsMatch(stringToValidate, emailPattern, RegexOptions.IgnoreCase))
+            {
+                return new ValidationResult("URLs are not allowed.");
+            }
+        }
+
+        return ValidationResult.Success;
+    }
+}

src/cloudscribe.SimpleContactForm/ViewModels/MessageViewModel.cs

@@ -15,15 +15,19 @@ public class MessageViewModel
         public string FormId { get; set; }
 
         [Required(ErrorMessage = "The Name field is required.")]
+        [NoUrl(ErrorMessage = "URLs are not allowed in the Name field.")]
         public string Name { get; set; }
 
         [Required(ErrorMessage = "The Email field is required.")]
         [EmailAddress(ErrorMessage ="The Email field is not a valid email address.")]
+        [NoUrl(ErrorMessage = "URLs are not allowed in the Email field.")]
         public string Email { get; set; }
 
+        [NoUrl(ErrorMessage = "URLs are not allowed in the Subject field.")]
         public string Subject { get; set; }
 
         [Required(ErrorMessage = "The Message field is required.")]
+        [NoUrl(ErrorMessage = "URLs are not allowed in the Message field.")]
         public string Message { get; set; }
 
         public string RecaptchaPublicKey { get; set; } = string.Empty;