Field validation working, but receiving spam anyway

Hi,
I have set up an order form, enabled the Simple Field validation using a combination of required fields and a custom field, and when tested, it works as "advertised". Failure to fill required fields stops the process. It works. I like it.

HOWEVER

For a few weeks I have been getting huge amounts of spam from a bot that somehow gets past the validation. Required fields are left blank and the form is partially filled with this kind of stuff:

no rx soma purchases on line tramadol prescriptions online saturday delivery = generic cialis us pharmacy generic cialis from india bying = buy tramadol online buy ultram perscription drug stores = ultram perscription drug stores home loan mortgage lender buy tramadol = purchase tramadol without a prescription buy levitra without prescription 

...and the form is submitted anyway. Nothing I have tried stops it. Any ideas?

Hi,
The normal validation is a mere javascript check that is run "client-side". Any Browser not using javascripts may easily bypass this validation. You'll find a few threads dating a few months back on this topic, though there are a few simple steps to start with:

* Enable Image Verification or the ReCaptcha Plugin.
* Use the Serverside Validation code (on the Validation tab) to check the submitted values once the form has been submitted. You'll find some examples on the forum, but a simple check that "name" is not empty would look like this:

<?
if (empty($_POST['name'])) {
  return "You must supply a name";
}
?>

/Fredrik

Thanks for the advice, Fredrik.

I am working on a Joomla 1.5 installation for this client, and will implement server side validation when the site is ready.

The current problem is occurring in a Joomla 1.0 installation with Chronoforms 2.3.9 installed, so, no Server Side Validation section of the validation screen is available.

Can you point me to a howto for server side validation for CF 2.3.9? Thanks for your help, and sorry I was not clear with my first question.

Hi,
Unfortunately, I'm not very familiar with the older versions of CF such as the v2.3.9.
I do, however, believe there's an Image Verification feature in the v2.3.9? You should be able to find this on the "Antispam" tab. Enabling that usually reduces the amount of spam.

/Fredrik

Hi Paiyili,

ChronoForms 2.3.9 didn't support serverside validation.

You can probably so something similar by adding code to the OnSubmit before box by hand.

Bob