SPAM-Problem with ChronoForms 7

Hello,
​
after getting no response on the contact form (chronoengine.com/contact) I now try to get the problem solved here.
​
We have a huge problem with spam (ChronoForms 7 on Joomla 3.10)
The reason is, with disabled JS in the browser, there is no form validation active. We use ReCaptcha3 as well. Without any difference.
​
Does the plugin no PHP-Validation?

Hi bkapelari,
​
In CFv7 serverside validation is enabled by default. If you click the Settings tab in the form then look at the Behaviors > Data area you should see a "Validate Fields" block. If it is not there you can click the down arrow to the right and add it. This should apply the Validations you have set for any of the form fields.
​
If you use the Security Image check that should, I think, be independent of JavaScript running.
​
Best wishes
​
Bob

Thanks for the reply.
​
I allready had the "Validate Fields" option enaled.
the problem is, even if i set up the Security Image, the validation says something is wrong but the Confirmation Message appears together with the error.
​
​
​

I came here looking for this exact issue. The form has validation and security image enabled, but still proceeds in sending emails/confirmation messages even when the checks fail.

The form displays the success message as well as the error, just like @bkapelari. Tried uploading here, but image upload fails.
​
Debug tells the story though. You can see both that the security image captcha has failed and that the emails have sent anyways.
​

Array
(
    [start_page_secicon] => Array
        (
            [_error] => The security image verification has failed.
            [var] => false
        )

    [settings_admin_email] => Array
        (
            [recipients] => Array
                (
                    [0] => REDACTED
                )

            [subject] => Registration/Interest Form Response
            [body] => We have received the following details:



{email_content}
            [from_name] => REDACTED
            [from_email] => REDACTED
            [reply_name] => REDACTED
            [reply_email] => REDACTED
            [result] => the Mail sent successfully.
            [var] => true
        )

    [start_page_datalog] => Array
        (
            [data] => Array
                (
                    [aid] => NULL
                    [form_id] => 7
                    [uid] => bcba0cb3-a39e-4511-8fe6-1e47e06aaccf
                    [user_id] => 32
                    [created] => 2021-10-01 16:08:14
                    [modified] => NULL
                    [ipaddress] => REDACTED
                    [page] => 1
                    [data] => {"__loops":null}
                )

            [var] => Array
                (
                    [aid] => 265
                    [form_id] => 7
                    [uid] => bcba0cb3-a39e-4511-8fe6-1e47e06aaccf
                    [user_id] => 32
                    [created] => 2021-10-01 16:08:14
                    [modified] => NULL
                    [ipaddress] => REDACTED
                    [page] => 1
                    [data] => {"__loops":null}
                )

        )

    [settings_user_email] => Array
        (
            [recipients] => Array
                (
                    [0] => REDACTED
                )

            [subject] => Thank you for contacting us!
            [body] => [h2]Your information has been received.[/h2]
            [from_name] => REDACTED
            [from_email] => REDACTED
            [reply_name] => REDACTED
            [reply_email] => REDACTED
            [result] => the Mail sent successfully.
            [var] => true
        )

This is a really annoying bug. ReCaptcha + Security Image and still a lot of spam!

@sixdeuces: uploading a image here fails for me as well. I had to upload it to my own server to display it here

Hi Bob, I'm having the same issue. The "Validate Fields" option is activated, tried ReCaptcha V2 and V3, tried form with AJAX and without AJAX, etc and the problem persist: THE FORM IS SENT TO THE ADMIN EMAIL even with failed validations and with the ReCaptcha unchecked.
​
Please, hope you can fix this quickly. I bought my subscription for: https://www.coosanluis.coop/contacto/
​
Thanks in advance!
​
Jorge.

Hi,
​
ChronoForms v7 does appear to offer Serverside PHP validation but it appears from other posts that is not working correctly. I am not very familiar with v7 and don't have a fix.
​
Bob