Forums

Hi,

We have Chronoforms V3.2 on a Joomla 1.5.23 website.

We are receiving lots of spam messages on the form, it look like they are coming from bots. We are using Chronoforms captcha, but they seem to be bypassing the captcha check.

Any ideas how to stop the spam?

Hi rlab,

The ChronoForms ImageVerification is a serverside check and isn't easily by-passed by bots. You could try some other check in the serverside validation.

Or another approach is to apply some kind of black list filter on IP addresses or emails if there is any consistent pattern.

Bob

Hi, GreyHead.

I have the same problem (spam message).
I read this post : http://www.chronoengine.com/forums.html?cont=posts&f=2&t=22909&p=97728 and understand, that I need to add server-side validation.
How I can do this right ?

There php-code, I think I need to add it to the Before email code

$check_email = false;
  if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$", $email)) {
    $check_email = true;
  }

So, what if-else I need to add to filtering not valid form (don't send a spam message to email) ?
Like this:

$email_array = array(input_email_field);

foreach ( $email_array as $v ) {
  $form->$email[$v];

  $check_email = false;
  if(!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$", $email[$v])) {
    $check_email = true;
  }

  if ($check_email != true) {
    # WHAT I NEED TO DO HERE ?
    # ... something to don't send email ?
  }
}

Hi RoJa,

In CFv4 there is an Auto Server-side Validation action. This just repeats the basic validation but does it after the form is submitted. Drag this action into the On Submit event near the beginning and then drag an Event Loop action into the pink On Fail box. Open the configuration and add the input names in the variosn validation boxes.

If you need a more customised validation, e.g. to check some database entries, then use the Custom ServerSide Validation action.

Bob

Check, please, is there everything right ?

I put Auto Server Side Validation between the Captcha and Upload Files block, is that right ?

[attachment=1]auto_server_validation_01.jpg[/attachment]
[attachment=0]auto_server_validation_02.jpg[/attachment]

Hi RoJa,

That looks OK to me. Does it work?

Bob

Time will tell ...