Spammer bypassing chrono captcha

Hi,

Thanks for the great software. It has been doing a great job.

In the last day we are getting spam from our form. How do we know if it is a bot or a real person?

Is the captcha doing the job?

Thanks
OSSrev1

Hi OSSrev1,

The Captcha will mostly protect against spam-bots. Though most Captcha can be broken by someone serious enough :-(

The Captcha will not protect against human spammers (and there are plenty of those around).

Client-side validation with JavaScript will not protet against spammers with JavaScript turned off

You can, and probably should, add some serverside validation. This can be very simple if your spammers mostly post junk or empty forms; or more sophisticated if forms are being completed with valid entries. Hidden honeypots are good against spambots. In the end though almost nothing will protect against a detemined human spammer :-(

Bob

Hi Bob,

I can confirm it is a bot. I think your captcha has been broken. What can I do? 😢

Hi OSSREVOLUTION ,

Switch to ReCaptcha, if you are using CFv4 the latest release also has some new security question options. They will be better against bots.

Bob