Hi Getting a lot of spam contact forms which are bypassing recaptcha 1. How can I add a 'get senders IP address' so I can block IP's 2. Is there a way of inserting key words to block for example on another contatc form I can add this: $SpamErrorMessage = "One of your words is triggering spam."; if (preg match("/@bk.ru/", "$email")) {echo "$SpamErrorMessage"; exit();} Is there something similar I can do with your form and where would i put it? So you now which version I am using....

Spam allowed through on Recaptcha

21 replies·opened Jul 19, 2019

neosdesign2Jul 19, 2019

Hi Getting a lot of spam contact forms which are bypassing recaptcha

How can I add a 'get senders IP address' so I can block IP's
Is there a way of inserting key words to block

for example on another contatc form I can add this:
$SpamErrorMessage = "One of your words is triggering spam.";
if (preg_match("/@bk.ru/", "$email")) {echo "$SpamErrorMessage"; exit();}

Is there something similar I can do with your form and where would i put it?

So you now which version I am using....

My form.php stars with this:
<?php

/*-------------------------------------------------

	Form Processor Plugin
	by SemiColonWeb

---------------------------------------------------*/

/*-------------------------------------------------
	PHPMailer Initialization Files
---------------------------------------------------*/

use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;

require 'phpmailer/src/Exception.php';
require 'phpmailer/src/PHPMailer.php';
require 'phpmailer/src/SMTP.php';

							<form class="nobottommargin" id="template-contactform" name="template-contactform" action="include/form.php" method="post">

								<div class="form-process"></div>

								<div class="col_one_third">
									<label for="template-contactform-name">Name <small>*</small></label>
									<input type="text" id="template-contactform-name" name="template-contactform-name" value="" class="sm-form-control required" />
								</div>

SemiColonWebSTAFFJul 19, 2019

Hello,

The issue is that these Forms are filled up by Real People who send out SPAM and not Bots (our Forms Processors are designed to protect against Bot SPAMs), which is why the reCaptchas are also passed. As a result, the Form Responses are successfully delivered.

An extra layer of protection is required to filter out words that you want to block when sending out Form Responses to your Emails. Consider using this File: https://www.dropbox.com/s/nk4fhz2hc0dmh9p/form.php?dl=1 and edit the $spam_keywords Array to add the words you want to block.

If the words are found in any Field on your Form, the Processing will be stopped and the response will not be sent. However, it will still show a Successful Message to the User so that they don’t know what is going on behind the hood which will prevent them from finding another way of sending SPAM.

Hope this Helps!

Let us know if we can help you with anything else or if you find any further issues.

neosdesign2Jul 19, 2019

I replaced the form.php with the new one but didn't stop that - I added the keyword 'viagra' in the Message field and it still came through

Do I need to do anything else?

SemiColonWebSTAFFJul 19, 2019

Hello,

Please provide us with a Live URL so that we can check out the exact issue and provide you with more assistance on this. Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

neosdesign2Jul 19, 2019

https://www.bettergrowing.com/contact.php

SemiColonWebSTAFFJul 19, 2019

Hello,

We have just checked the Codes and everything else and tried adding the Blocked SPAM Words and it appears to be working perfectly fine for us. Can you please confirm if you are still receiving the Emails in your Email Address with the Blocked SPAM Words: "Viagra"?

Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

neosdesign2Jul 19, 2019

when I fill it in I get the contact form

see screenshot as t what I filled in

here's the email

Form Response
Name
Neil Davey
Email
neil@ranegroup.co.uk
Phone
7521523326
Service
Bulk Bags
Message
Viagra
This Form was submitted from: https://www.bettergrowing.com/contact.php

SemiColonWebSTAFFJul 19, 2019

Hello,

Wow! Any chances you could provide us with your SMTP Credentials in a Private Reply so that we can check this further. Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

neosdesign2Jul 19, 2019

I was only sending form.php to neildaveyneos@hotmail.com to test before I re addd the clients email on again

what do you suggest?


$toemails = array();

$toemails[] = array(
				'email' => 'neildaveyneos@hotmail.com', // Your Email Address brian@bettergowing.com
				'name' => 'Brian McCuskey' // Your Name
			);

/*-------------------------------------------------
	Sender's Email
---------------------------------------------------*/

$fromemail = array(
				'email' => 'sales@bettergrowing.com', // Company's Email Address (preferably currently used Domain Name)
				'name' => 'Better Growing' // Company Name
			);

neosdesign2Jul 19, 2019

or did you mean FTP

SemiColonWebSTAFFJul 19, 2019

Hello,

Ohh! Apologies! We meant FTP Credentials.. :/

Thanks for your Patience.

neosdesign2Jul 19, 2019

ftp.bettergrowing.com
brian@bettergrowing.com
bet748gr3

SemiColonWebSTAFFJul 19, 2019

Hello,

Thanks for your Patience!

We have been testing your Forms and it appears that the Form is actively blocking the Keywords. Can you please check the contact page and try submitting?

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

neosdesign2Jul 19, 2019

just filled in a form and its still coming through

$toemails[] = array(
	'email' => 'neildaveyneos@hotmail.com', // Your Email Address brian@bettergowing.com
	'name' => 'Brian McCuskey' // Your Name
);

Name
neil
Email
neil@mournedigital.com
Phone
44
Service
Retail Bags
Message
viagra

SemiColonWebSTAFFJul 19, 2019

Hello,

We are really not sure why it does not work for you. Might be a Cache Issue. Consider visiting the Form directly: https://www.bettergrowing.com/include/form.php and then submit the Form again: https://www.bettergrowing.com/contact.php .

It works for us smoothly.

Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

neosdesign2Jul 19, 2019

ok
when I visit https://www.bettergrowing.com/include/form.php I get { "alert": "error", "message": "An unexpected error occured. Please Try Again later." }

I then try the form again and it still sends it through

Can you screenshot what you enter in the fields and do you get an error message or does the green 'success' message show

Then I may just leave it as is to see if works from the spammers

neosdesign2Jul 19, 2019

I clicked not the link and got

{ "alert": "error", "message": "An unexpected error occured. Please Try Again later." }

I then completed the form again and it still sent

Can you screenshot the form as you filled it in please and let me know if you get the green success message or other?

Then I will leave it to see if it stops the spammers

SemiColonWebSTAFFJul 20, 2019

Hello,

Thanks for your Patience!

We are not really why this does not work for you but works for us perfectly fine on YOUR Websites. Please check the Screenshots and try to replicate this Test.

SemiColonWebSTAFFJul 20, 2019

and then these are the results from the Forms.

The First Screenshot is with the Blocked Word and the Second Screenshot is without the Blocked Word.

SemiColonWebSTAFFJul 20, 2019

But as we had mentioned earlier in Our Replies, that we have still set a Successful Message even if the Form includes a Blocked Word so that the Spammer does not know what is going on behind the hood but the Form does not get processed.

Hope this Helps!

Let us know if we can help you with anything else or if you find any further issues.

neosdesign2Jul 22, 2019

thanks for your help as always!

some emails are still get through

Is there a way I can add some code so the IP address show of the sender please?

thanks very much for your help

SemiColonWebSTAFFJul 24, 2019

Hello,

Unfortunately, the Functionality related to this is currently not included with Canvas. So, any further customization or feature/functionality enhancements related to this is your responsibility as we currently do not provide Customization related Support according to the Item Support Policy: https://themeforest.net/page/item_support_policy .

You can consider using this code in PHP to record the IP Address:

<?php echo $_SERVER['REMOTE_ADDR']; ?>

We will definitely try adding this feature in the Future Updates. Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas. Thanks. :)

Have the same question, or something new?

Sign in to the Canvas dashboard to reply or open your own topic. Canvas owners get direct help from the SemiColonWeb team.

Reply on the dashboard