Forums

I'm trying to foil the oddest spammer I've run across.
​
I recently installed the Ospamanot PlugIn, and between the timegate and honeypot, it's been catching nearly all my problems. However, someone has programmed a bot to foil both of these and submit a record with no entries. Here's a screenshot of the results;
​
https://www.screencast.com/t/2n1W0iSSO
​
I downloaded the CSV and confirmed these are null fields, not spaces.
​
Yesterday, I had added Server Validation to the "On Submit" with checks for not empty and not spaces:
​
https://www.screencast.com/t/Fm4QrH1r
​
I added an Event Loop with "load" when it goes to "On Fail."
​
The latest email was received last night after the Server Validation was installed. Is there a step I've missed, or is there something else I need to consider?
​
I know it's an exception, but getting these emails is irritating my client, and I'm stumped and don't want to manually review each submission.

If you've put a not-empty check in and it's still letting empty values through then you've probably missed something.

Yes, the second screenshot includes the not-empty check, so there's likely some other problem. I'll hold off and hope that another forum user might have more guidance.

You'll have to wait for Bob or Maxx then, all I would suggest is move to CFv6

Hi beykeysr,
​
It looks as though you should use a custom validation and check for strings of underscores.
​
Bob

The underscores are just something I added to the form to separate the fields more in the notification email.
​
Somehow the bots are simply hitting "submit" without entering any data in the form. When I download the record from the database, the fields are empty.
​
I inserted the server side validation in the Setup screen "On Submit" but it's not confirming that these fields are 'not empty.' Is the custom validation something different than server side validation? Is there any documentation I can reference to help me implement it?

Just to check - your field is actually literally called "Name" ? With that EXACT spelling and everything? The fieldname itself and NOT THE LABEL?

Yes, actually the field ID and label are both "Name"
​
Screen shot of the element settings:
https://www.screencast.com/t/MFHgpgGgxtly

Hi beykeysr ,
​
Custom Serverside validation is still the most likely answer to your problem. Use PHP to check for empty strings.
​
Bob