Forums

Spam messages despite the captcha

moi34 24 Oct, 2016
Hello,

I use chorforms V5 for a while now and since few months I start getting spam message with the form despite the captcha.
For example this morning I received two of them here the kind of message I get :
Nom wnowbyengfy 
Email bfpput@wvtfwv.com 
Sujet qLFTSirHW 
Votre message f53kUz owkmzgkiozyp, uzxiwstndfnt, [link=http://xjpxgyxzduzp.com/]xjpxgyxzduzp[/link], http://khmqdosrylzz.com/ 
IP: 46.161.9.31 

Nom asnerntbm3u 
Email gaff@your-free-mail.bid  
Sujet  
Votre message http://genericeffexor.date/ - effexor http://acyclovir.website/ - acyclovir http://amoxil.tech/ - amoxil http://buyproscar.men/ - proscar price  
IP: 46.161.9.24 


Does anyone know why I get those ? Am I wrong thinking if I say that if I have a captcha I shouldn't get spam message ? Did I miss doing something in my form ? How can I block those kind of message ?

Thanks In advance for your help
GreyHead 24 Oct, 2016
Hi moi34,

The IP address is a Moscow one. It looks like fairly standard spam so maybe your Captcha is not configured correctly? Or possibly they are human spammers who can pass a Captcha.

I would add a serverside check to block this IP address and possibly to block any messages with http:// in them

Bob
moi34 24 Oct, 2016
Hi Bob,

Thanks a lot for your quick answer.
I am not sure how to add a serverside check to block this ip and to block any message with http://
Could you give me some hint about how to do it ? Would be great.

Thanks again
Moi34
moi34 24 Oct, 2016
Hello again,

I've read the link you gave me and I understood that I need to block the Ip adress and check if there is http:// in the message but I couldn't understand how to do it.
To block a specific ip adress I have to add this kind of code in my form
<?php
$banned_ips = array(
  '46.161.9.1',
  46.161.9.999'
);
$ip_address = JRequest::getString( 'REMOTE_ADDR', '', 'server' );
if ( in_array($ip_address, $banned_ips) ) {
  return "You are not authorized to use this service!";
}
?>

but where and how ?
Right now my form looks like the attached image

can you give more details to what I should do ?

thanks in advance
GreyHead 25 Oct, 2016
Answer
Hi moi34,

Looking at the screenshot in your post the Check Captcha action does not have anything in the pink On Fail event, so it does nothing useful. Please drag an Even Loop action in there. That may be all that you need to do.

Bob
moi34 07 Nov, 2016
Hi GreyHead,

Thanks a lot for your help since I added an Even Loop action in the On Faile event I didn't had another mail from those IP.

Thanks again
Have a good day
Moi34
This topic is locked and no more replies can be posted.