Form captcha breached
Permalink
Guys
I have a customer with a contact form here:
http://www.clearviewbusiness.com/contact/get-touch/...
He is being bombarded with spam form entries. it seems to be bots breaching the captcha.
Does anybody have any ideas as to how this might happen and what might be done about it please?
Ian
I have a customer with a contact form here:
http://www.clearviewbusiness.com/contact/get-touch/...
He is being bombarded with spam form entries. it seems to be bots breaching the captcha.
Does anybody have any ideas as to how this might happen and what might be done about it please?
Ian
That has installed fine and seems to work. Lets se if the spam stops.
Thanks for your help.
Ian
Thanks for your help.
Ian
Hopefully that did stop the spam, however you may be interested in the (free) invisible recaptcha addon I just uploaded.
https://www.concrete5.org/marketplace/addons/invisible-recaptcha/...
https://www.concrete5.org/marketplace/addons/invisible-recaptcha/...
Thanks, I'll take a look.
Here's a radically different approach:
https://www.concrete5.org/marketplace/addons/contact-form-no-links1...
https://www.concrete5.org/marketplace/addons/contact-form-no-links1...
Interesting approach - however the site referenced is 5.6 and your addon is 5.7+.
It's probably no that hard to override the 5.6 block controller and make it check for links as yours does.
It's probably no that hard to override the 5.6 block controller and make it check for links as yours does.
Gentlemen,
Thank you all for your responses. I will investigate all three.
Ian
Thank you all for your responses. I will investigate all three.
Ian
You also have a fully exposed email address on your page that could easily be protected from spam bots by installing this free addon..
http://www.concrete5.org/marketplace/addons/automatic-email-obfusca...
Your exposed email even has the subject line added "subject=Enquiry from the Website."
http://www.concrete5.org/marketplace/addons/automatic-email-obfusca...
Your exposed email even has the subject line added "subject=Enquiry from the Website."
Ian,
My 2 cents...
The best way to prevent bot spamming and input injection attacks is to sanitize all form inputs (basically to strip all non text symbols, e.g. \n, \r) and to add a limit on the form submission frequency from the same IP, e.g. once every 1 or 10 minutes.
And yes, of course not to show any email address in plain text anywhere on site.
My 2 cents...
The best way to prevent bot spamming and input injection attacks is to sanitize all form inputs (basically to strip all non text symbols, e.g. \n, \r) and to add a limit on the form submission frequency from the same IP, e.g. once every 1 or 10 minutes.
And yes, of course not to show any email address in plain text anywhere on site.
http://www.concrete5.org/marketplace/addons/recaptcha-captcha/...