We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 31950
    • 21 Posts
    I need help. Veriword and a hidden field has been added to my site. I cannot get it to stop spam messages. I need someones help. Suggestions, direction please.

    www.seoserviceshouston.com..

    I followed softwell’s directions
      • 31950
      • 21 Posts
      Please help. I am going mad tryin to stop this 50 email spams a day.

      So this is my code below.



      Here is the check field snippet


      <?php
      function checkField(&$fields,&$vMsg,&$rMsg) {
          if(!empty($fields['Last__Name'])) {
              return false;
          } else {
          return true;
          }
      }
      

      Here is my websiteform chunk

      
      <form method="post" action="[~[*id*]~]" id="EmailForm" name="EmailForm" class="quick_analysis_form">
      <span class="error">[+validationmessage+]</span>
      
      		<input name="formid" type="hidden" value="websiteform" />
      
      		<p><label for="cfName">Name</label><input name="name" id="cfName" type="text" eform="Name:string:1:" /> </p>
      
                      <input type="name" name="Last__Name" id="LastName" size=30 autocomplete="off" eform="LastName::0" />
      
      		<p><label for="cfEmail">Email</label><input name="email" id="cfEmail" type="text" eform="Email:email:1" /></p>
      
      		<p><label for="cfPhone">Phone</label><input name="phone" id="cfPhone" type="text" eform="Phone:string:1:" /></p>
      
      		<p><label for="cfDomain">Domain</label><input name="domain" id="cfDomain" type="text" eform="Domain:string:1:" /></p
      
                      <p><label for="cfMessage">Message</label><textarea name="message" id="cfMessage"></textarea></p>
      
                      <p><label>Anti-spam code:</label><input type="text" name="vericode" size="40" /></p>
      
                       <p><label> </label> <img src="[+verimageurl+]" alt="verification code" /></p>
      
      		<p><input type="submit" name="contact" id="cfContact" value="submit" class="btn" /></p>
      </form>





      Here is the call...


      <h1>Get a Free Web Design Quote Today!</h1>
      Fill out the form below and we will be in touch soon
      [!getServer!]
      [!checkfield!]
      [!eForm?
        &formid=`websiteform` 
        &vericode=`1`
        &to=`[email protected]` 
        &tpl=`websiteform` 
        &report=`WebsiteFormReport` 
        &thankyou=`WebsiteFormThanks` 
        &subject=`Open Source CMS Quote/Purchase Request`
        &gotoid=`46` 
      !]




        • 18913
        • 654 Posts
        I’m not sure what your "checkfield" is doing other than return TRUE or FALSE. In either case, it’s not clear anything is done with that result.

        Assuming I’m missing something, get your spelling. Your function name has one kind of capitalization and your snippet call another.

        Are you saying you are getting spam even though the Veriword captcha routine is working? Are you sure the spam is coming from that form?? I would have thought that if that captcha routine was *that* easy to break, it wouldn’t be used much.

        Just my two cents ...
        MattC
          • 3749
          • 24,544 Posts
          Have you tested the form yourself?

          Does it reject incorrect CAPTCHA entries?

          Is the CAPTCHA image different for each visit?

          If you make the hidden field visible, does it reject forms that have it filled in?

          BTW, there are several ways to block certain IP addresses if you have a single aggressive spammer.

          SPForm will let you block IP addresses pretty easily. I don’t know if eForm does or not.

            Did I help you? Buy me a beer
            Get my Book: MODX:The Official Guide
            MODX info for everyone: http://bobsguides.com/modx.html
            My MODX Extras
            Bob's Guides is now hosted at A2 MODX Hosting
            • 31950
            • 21 Posts
            Quote from: mconsidine at Feb 21, 2010, 02:34 PM

            I’m not sure what your "checkfield" is doing other than return TRUE or FALSE. In either case, it’s not clear anything is done with that result.

            Assuming I’m missing something, get your spelling. Your function name has one kind of capitalization and your snippet call another.

            Are you saying you are getting spam even though the Veriword captcha routine is working? Are you sure the spam is coming from that form?? I would have thought that if that captcha routine was *that* easy to break, it wouldn’t be used much.

            Just my two cents ...
            MattC

            Not sure about the true/false stuff, i just followed direction. I don’t know PHP.

            The capitalism, i checked to make sure the snippet is calling the chunk name (case sensitive) correctly. I went ahead and fixed the cap error within the snippet the code it self so it does not have any caps. I filled out the field which was hidden by CSS and it still processed the form. : [

            The Veriword is working, i have tested it quite a bit. All of the forms have unique names and I am sure they are all having this veriword add on.
              • 31950
              • 21 Posts
              Ok, this lsat post is helpfull. i took away the css hide code and some forms are working and others are not, i must have made an error somewhere.
                • 31950
                • 21 Posts
                Well thank you for stimulating my mind, i found some inconsistencies.

                I did not add the &eformOnValidate=`checkField` field in my snippet.

                I added it and now i do not get emails if that field is filled out.

                Sweet.
                  • 3749
                  • 24,544 Posts
                  Glad you got it sorted. Thanks for reporting back. smiley
                    Did I help you? Buy me a beer
                    Get my Book: MODX:The Official Guide
                    MODX info for everyone: http://bobsguides.com/modx.html
                    My MODX Extras
                    Bob's Guides is now hosted at A2 MODX Hosting
                    • 31950
                    • 21 Posts
                    Ok after a few days, the forms are working fine but these spammers are relentless. The hidden field is still working when i manually remove css and try them my self. This is getting annoying, i guess im going to make the hidden field an email field and name it last_name and hoepfully these spammers wont be able to get through anymore.
                      • 3749
                      • 24,544 Posts
                      It may help to rename the hidden field often, but the CSS gives it away. If you look at the SPForm readme.txt, you can see a way to hide it without using display:hidden. That does a better job (though still not perfect). I’ve had good luck with banning particularly persistent spammers by IP number in SPForm.

                      SPForm also has options to require the mouse or keyboard, and a timer that rejects posts that take too little or too much time to complete.

                      TBH, the most powerful spam protection I’ve found is SPForm’s CAPTCHA with the math equation option on.
                        Did I help you? Buy me a beer
                        Get my Book: MODX:The Official Guide
                        MODX info for everyone: http://bobsguides.com/modx.html
                        My MODX Extras
                        Bob's Guides is now hosted at A2 MODX Hosting