Bienvenido, Invitado
Recordarme

TEMA:

Mandatory, custom validation field ignored by spam bots 10 meses 1 semana antes #253426

  • Autor del tema
  • altertainment
  • Fuera de línea
  • Fresh Breezer
  • Fresh Breezer
  • Mensajes: 2
  • Gracias recibidas: 0
Hi! I am using Breezingforms Pro on my website. I secured my contact form with recaptcha, but still get some spam emails and spam records so I decided to add a second custom security check. Users need to add two numbers and enter the result, which is checked by a custom validation:

function ff_Rechencaptcha_validation(element, message)
{
if (element.value != 17) {
if (message=='') message = "Wrong result. Bla. Calculate 15 + Two."
ff_validationFocus(element.name);
return message;
} // if
return '';
} // ff_Rechencaptcha_validation

So far it works, I can not sumbit the form without entering 17.

But still I get records and emails by spam bots without any value in this field. Any idea how this is possible and how to prevent it?

Por favor, Identificarse o Crear cuenta para unirse a la conversación.

Mandatory, custom validation field ignored by spam bots 10 meses 1 semana antes #253436

  • Avatar de tihana.krivic
  • tihana.krivic
  • Fuera de línea
  • Moderator
  • Moderator
  • Mensajes: 7800
  • Karma: 3
  • Gracias recibidas: 550
Hi,

ok, validation is ok.
Also, you can do it like this:
 if (element.value != 17 || element.value=='') {
if (message=='') message = "Wrong result. Bla. Calculate 15 + Two."
ff_validationFocus(element.name);
return message;
} // if
return '';

You can use honeypot too:
crosstec.org/en/support/online-documenta...ts/210-honeypot.html

Hope this helps

Regards,
Tihana

Por favor, Identificarse o Crear cuenta para unirse a la conversación.

Mandatory, custom validation field ignored by spam bots 10 meses 1 semana antes #253448

  • Avatar de Eddy.vh
  • Eddy.vh
  • Fuera de línea
  • Ultimate Breezer
  • Ultimate Breezer
  • Mensajes: 669
  • Karma: 4
  • Gracias recibidas: 113
Hello,

There is a sample form to download here .
It proposes a "captcha" by calculation of random numbers.

Maybe this form will help you to configure yours?

Regards,
Eddy

Por favor, Identificarse o Crear cuenta para unirse a la conversación.

Mandatory, custom validation field ignored by spam bots 10 meses 1 semana antes #253520

  • Autor del tema
  • altertainment
  • Fuera de línea
  • Fresh Breezer
  • Fresh Breezer
  • Mensajes: 2
  • Gracias recibidas: 0
Hi folks,

thank you for your input so far, but I still did not manage to resolve the issue.
I updated my validation to this:

if (element == null || element.value == null || element.value == '' || element.value != 17)
{
...
}


But spam bots still manage to send the form without entering a number at all. The problem is not that the result (17) is too easy to guess, they just ignore it. Just a few hours ago I received a new spam mail and when I look at the record in the backend I can see the value for the validated field was empty.

Por favor, Identificarse o Crear cuenta para unirse a la conversación.

Mandatory, custom validation field ignored by spam bots 10 meses 5 días antes #253563

  • Avatar de tihana.krivic
  • tihana.krivic
  • Fuera de línea
  • Moderator
  • Moderator
  • Mensajes: 7800
  • Karma: 3
  • Gracias recibidas: 550
Hi,

please try to protect this field with honeypot.
Go to your form->Advanced->More options->Submit pieces->Begin Submit->check Custom and put this:
$this->execPieceByName('ff_InitLib');
if( ff_getSubmit('nameofyourfield') != '' )
{
    // echo '<script> alert ("error"); </script>';
     exit; 
} 
Please replace nameofyourfield with name for your mandatory field (not title).
Nameofyourfield is mandatory field, also set with validation scripts, and must be adapted to the name of your field.

If this field is empty the form will not be sent.

Regards,
Tihana

Por favor, Identificarse o Crear cuenta para unirse a la conversación.

  • Página:
  • 1
Moderadores: ForumSupport
Tiempo de carga de la página: 0.055 segundos