CFv5 Anti-Spam

Question

Hi,

in my installation I get a lot of spam from China and Ukraine.
Strange thing is, that at least one required field seems not to be filled (email). It has required=yes and email=yes.

Anyway, as there seem to be only a few different IPs, I wanted to block them with this code:

<?php
$banned_ips = array(
  '111.111.111.111',
  '999.999.999.999'
);
$ip_address = JRequest::getString( 'REMOTE_ADDR', '', 'server' );
if ( in_array($ip_address, $banned_ips) ) {
  $mainframe->redirect('index.php');
}
?>

But after safing the custom code action, there will be some backslashas added:

<?php
$banned_ips = array(
  \'111.111.111.111\',
  \'999.999.999.999\'
);
$ip_address = JRequest::getString( \'REMOTE_ADDR\', \'\', \'server\' );
if ( in_array($ip_address, $banned_ips) ) {
  $mainframe->redirect(\'index.php\');
}
?>

And it doesn't work.

So I have a few questions:
I think a php-setting causes the backslashes. Any idea which one?
2. Is there a simple possibility to add a hidden field in V5? A honeypot which blocks submitting if filled.
3. Is there a possibility to block form-submittion within the first 5 seconds after loading? I know this option from "EasyCalcCheck Plus". It seems to be really helpful, but ecc+ doesn't support Chronoforms.

Any other ideas? I would like to avoid using a captcha....🙂

Thanks in advance,
Viktor

Max_admin · Accepted Answer

Hi Viktor,

Do you have any of the "magic_quotes" settings enabled on your PHP ? if yes then they are the source of the slashes issue, please make sure that all of them are disabled.

#2,3- I have a new honey pot action here which does what you need, more over it can add that hidden field using javascript, to ensure that the user has javascript enabled browser, which would not let them skip the field validation.

You may also use "server validation", its done server side and can't be skipped.

You can contact me using the contact us page to get the new action if you like!

Regards,
Max

Forums

CFv5 Anti-Spam