CF6 honeypot check

Hi! Is the honeypot 'trap' action missing in CF6? will this be available in the near future? Or would you suggest other forms of anti-spam measures?

I am talking about adding the honeypot trap at the start of the form and then add the check in the onsubmit. Not the online check off the honeypot website /database you needed a token for.... Not even sure if thats still exisits??

Hello jj135,
I'm not a Chrono professional, but after checking your new post, I think that the following links may help:
How can I add a HoneyPot spam check?
P.S: I'm just an automated service😉

Hi jj35,

Max hasn't yet added the HoneyPot as an option in CFv6 - I don't know if he plans to do so in a future release.

You can add a 'classic' honeypot using the method in the FAQ that Professor Calculus linked to. Or you can use the Google ReCaptcha which most users will now be familiar with - though that does require you get the tokens from Google.

Bob

Would the manual 'honeypot' be as good as the CF HoneyPot action? I prefer a HoneyPot above the ReCaptcha. I believe not every webuser likes these things. I hate them ;-) Or maybe the Google Inbvisible ReCaptcha is a good option. Have you ever tried this? Maybe integrating this in CF would be a thought? I will see if I can get this to work on our forms...

I just took a crack at it. It's not that simple... There are several ways to envoke the ReCaptcha action and there is also some serverside action?? It's a bit to complex for me at the moment.

It would be nice if this new Google Invisible Captcha could be added as an 'action' in CF6 where we only need to fill out our site key / token.

Or could anyone give some instructions to get this working with custom elements on the form? Any help would be appreciated.

I do have a feeling this is a good way to prevent spam. I guess Google has thought about this a lot ;-) I have no actual experience with using this Invisible Captcha. So I don;t know for sure this will work in a real live environment.

https://developers.google.com/recaptcha/docs/invisible

@Max: If you plan to add this to CF6 I am available for testing!

Hi jj135,

I did look briefly at using the Google Invisible Captcha with CFv5 but - like you - I failed to find a way to get it to work :-(

Bob

Hi,

The honey pot action is on the todo list but I can not tell when it may be ready.

The invisible google recaptcha is just a button, so instead of ticking the checkbox, its integrated in the same button which submits the form.

Best regards,
Max

Thanks Max, hope to see this show up someday in CF6 ;-)

Indeed the Invisible Captcha is integrated in the submit button. I did manage to put the data parameters in the button but that caused the form to stop working. I might have done this the wrong way, but I gave up already... Also I think adding the js on top of the form and changing the button is just the first step right? Or should that be enough to get it going?

Hi jj135,

as far as I can remember, the recaptcha adds its own button, and that button needs to call a function to submit the form, there may be another way to use an existing button but I might have missed that.

But anyway its not a great time saver, the user can just tick the box using the normal method.

Did you try to enable the hidden form mode in the "Display section" settings ? when enabled the form will not work if javascript is not enabled, and if you have the "Validate fields" action in your submit event then this will add a very good protection against non clever human spammers.

Best regards,
Max

OK, haven't tried that yet. Sound like a pretty good way avoid spam ;-) I will definitely give that a go. Thanks!

Hi Max, I tried setting 'Invisible form' to 'Yes'. When I open the form in a browser (Firefox) and disable Javascript the form shows up. It also seems to work, because it shows the validation errors. So what exactly did you mean by 'the form will not work'?

Hi Jip,

Can you submit it ?

What I meant is that the page has no form tags, they are created using JavaScript.

Best regards,
Max

I believe I can still submit the form. After sumbmitting I see validation errors appear. The inline (client side) validation does not work so thats an indication js is disabled right?

I also do see form tags in the source code. Id o see 'data-invisible="1"' on the form tag....

Hi Jip,

Correct, this is actually a bug, I have just fixed it, you can wait for the next official update or send me a message using the contact page for an early patch!🙂

Best regards,
Max