Server Validation?

beykeysr 06 Feb, 2019
I'm trying to foil the oddest spammer I've run across.

I recently installed the Ospamanot PlugIn, and between the timegate and honeypot, it's been catching nearly all my problems. However, someone has programmed a bot to foil both of these and submit a record with no entries. Here's a screenshot of the results;

https://www.screencast.com/t/2n1W0iSSO

I downloaded the CSV and confirmed these are null fields, not spaces.

Yesterday, I had added Server Validation to the "On Submit" with checks for not empty and not spaces:

https://www.screencast.com/t/Fm4QrH1r

I added an Event Loop with "load" when it goes to "On Fail."

The latest email was received last night after the Server Validation was installed. Is there a step I've missed, or is there something else I need to consider?

I know it's an exception, but getting these emails is irritating my client, and I'm stumped and don't want to manually review each submission.
healyhatman 06 Feb, 2019
If you've put a not-empty check in and it's still letting empty values through then you've probably missed something.
beykeysr 06 Feb, 2019
Yes, the second screenshot includes the not-empty check, so there's likely some other problem. I'll hold off and hope that another forum user might have more guidance.
healyhatman 06 Feb, 2019
You'll have to wait for Bob or Maxx then, all I would suggest is move to CFv6
GreyHead 23 Feb, 2019
Hi beykeysr,

It looks as though you should use a custom validation and check for strings of underscores.

Bob
beykeysr 24 Feb, 2019
The underscores are just something I added to the form to separate the fields more in the notification email.

Somehow the bots are simply hitting "submit" without entering any data in the form. When I download the record from the database, the fields are empty.

I inserted the server side validation in the Setup screen "On Submit" but it's not confirming that these fields are 'not empty.' Is the custom validation something different than server side validation? Is there any documentation I can reference to help me implement it?
healyhatman 25 Feb, 2019
Just to check - your field is actually literally called "Name" ? With that EXACT spelling and everything? The fieldname itself and NOT THE LABEL?
GreyHead 03 Mar, 2019
Hi beykeysr ,

Custom Serverside validation is still the most likely answer to your problem. Use PHP to check for empty strings.

Bob
This topic is locked and no more replies can be posted.

VPS & Email Hosting 20% discount
hostinger