Could this be Span?

evilsnoop 12 Nov, 2012
I am using joomla 2.5.6, chronoform version 4.0 RC3.21.

Every 3 days I have been getting a weird email coming from my form from the same ip address, the values in the email are unreadable its a combination of jumble up letters with a url and they keep repeating in every input field. If this is spam how can i prevent it? Or is there a problem with the form itself.

An example of the email Could this be Span? image 1
GreyHead 12 Nov, 2012
Hi evilsnoop,

Please see this FAQ.

Bob

PS I suggest that you upgrade your ChronoForms to the current release as there have been some bug-fixes and improvements.
evilsnoop 20 Nov, 2012
I decided to try the honey pot but am having some trouble setting it up. I followed some information on other posts.

I add a new Text box and gave it a field name honey_pot

I change the form wizard to advance

I drag Custom Server Side Validation into the On Submit section and moved it up so that it is under the Check Captcha

I clicked on the configure icon and paste a script I found on a post title (Any way to validate that a field is left blank?)
<?
if (JRequest::getVar('somefield') != '') {
  return 'Evil spammer! Be gone';
}


I changed ‘somefield’ to ‘honey_pot’ and save the form.

I didn’t hide the text box with css because I wanted to test if I fill in the field with some fake text if the form will fail, but it still sent the form.

Can someone please help?

Also my default form wizard is set to easy, when I change it to advance and enter the server side validation save it, then switch back to easy mode. If I switch to advance again the server side validation is gone.
GreyHead 21 Nov, 2012
Hi evilsnoop,

I assume that you are using ChronoForms v4?

If so instead of a Custom Server Side Validation action I would use a Custom Code action and add this code:
 <?php
if ( $form->data['somefield'] != '' ) {
  $mainframe->redirect('http://www.ic3.gov/default.aspx');
}
?>
This is on the basis that if this is a spammer then you want to redirect them away from your site. Any suitable URL is OK.

Bob

PS The previous code you had was for CFv3 and I recall that there was a problem in using JRequest inside an 'if' statement.

Later: I wrote this up in this FAQ
evilsnoop 22 Nov, 2012
Thanks alot I got it working.
This topic is locked and no more replies can be posted.