CAPTCHA Anti-Robot Mod

[RixStix]

Are you using a template that makes use of the MegaMenu. I am not a coder and I cannot find the thread where I thought I read that the ContactUs functionality within the MegaMenu uses different code than the stock ContactUs code and may not have the Spam protection embedded within that portion of the code.

We started receiving Spam from our Sandbox site after installing a template using Megamenu. Prior to that, we never received any Spam.

Maybe a coder can either confirm or dispute these observations.

[g2ktcf]

It's a "deterrent" which means it will help prevent most normal spam.. but it's not bullet-proof and neither is CAPTCHA..

Exactly.. So like you pointed out SOME of the spam battle has to be manage using your e-mail client/host..

Well, I have both all my host's systems activated as well prior to even asking this question.

[g2ktcf]

I am indeed using the Abbington Mega Template where the Mega Menus are used.

[DivaVocals]

Are you using a template that makes use of the MegaMenu. I am not a coder and I cannot find the thread where I thought I read that the ContactUs functionality within the MegaMenu uses different code than the stock ContactUs code and may not have the Spam protection embedded within that portion of the code.

We started receiving Spam from our Sandbox site after installing a template using Megamenu. Prior to that, we never received any Spam.

Maybe a coder can either confirm or dispute these observations.

and THAT is the issue.. The contact form in the mega menu does not use the built in spam deterrents that are a part of Zen Cart's default Contact Us page.. It is my understanding that Anne opted not to use the CSS spam deterrent code for the contact_us form in the mega menu because it didn't validate..

HTML validation not a FINAL answer because the validator does still choke on code that is NOT invalid.. Adding the code CSS SPam deterrent code back to the mega menu contact us form will solve the issue.. I can't remember which support thread I saw this on, but it's posted on the forum somewhere..

Validate the code: Is it always necessary to pass the validation?

Assuming that for a developer being able to validate the code he’s creating usually represents a personal satisfaction as well as a challenge with himself, is it always necessary to pass the validation?
The green check mark that indicates a validated code is generated by a software in accordance with the result provided by an algorithm developed to verify the correctness of the code under exam. Considering that a software has some very strict rules, it can happen that the code of a Web document, even if perfectly developed, for whatever kind of banality not foreseen by the validation algorithm, may not be validated

[DivaVocals]

and one more..

Acceptable Validation Errors

Ideally all your pages would be 100% valid, though it’s not practical or even desirable at times to achieve 100% validation.
Some code that’s commonly used just won’t validate. Vender specific prefixes such as -webkit and -moz will never validate by definition. That doesn’t mean you shouldn’t use those vendor specific prefixes.
Hacks for specific browsers (I’m looking at you Internet Explorer) also won’t validate, though it’s unlikely you’ll find a developer who’s never written a coding hack. Sometimes they’re all you have to get the page working right.
Validators will also issues warnings in addition to errors. 100% valid code means 0 errors, but it could include any number of warnings. Some of those warnings aren’t going to be things you’ll want to fix. Many tracking parameters you add to the end of a url will give a warning for example.
In the end you shouldn’t sweat it if your pages aren’t 100% valid. Some errors and many warnings are perfectly acceptable as part of a well-coded page.

[DivaVocals]

and I couldn't resist one more.. Source: http://net.tutsplus.com/articles/gen...esnt-validate/

GOOD article on the real value of validation..

Validation is Not…

• A game. Don’t waste time achieving a 100% score, when you know exactly what you’re doing. However, do use it to point out your mistakes.
• An all-encompassing checker. While it does test for errors, it does not point out bad practices, accessibility issues, etc.
• To be used as an excuse for not embracing the latest CSS3 techniques. The longer you say to yourself, “I’ll use this in a few years…” the further you’ll fall behind.

and here is the answer to the CSS spam code not being included in the mega menu:

http://www.zen-cart.com/showthread.p...87#post1199787

The file that needs changing is /YOURSHOP/includes/templates/responsive_sheffield_blue/common/tpl_mega_menu.php

Add this line

<?php echo  zen_draw_input_field('should_be_empty', '', ' size="40" id="CUAS"  style="visibility:hidden; display:none;" autocomplete="off"');  ?>

after

<br class="clearBoth" />
                        <label for="enquiry">Message<span class="required"> *</span></label>
                        <textarea name="enquiry" cols="40" rows="3"  id="enquiry"></textarea> 

and YES, this code will cause the template to fail w3c xhtml validation. This the reason why it was not included in the mega menu code. but to quote Design75:

Ahh the autocomplete error :) That is one of those error I ignore completely, like the ones thrown at us about id's facebook uses

For those of you OBSESSED with that 100% validation score, you can use an encoding tool to encode this code which will shut the validators up.. (and for those getting ready to ask, you will need to Google encoding or start a separate thread to discuss further..)

[g2ktcf]

I could care less about Validation! :) I need to get my old copy of my local store setup to verify this before I make any live changes.

THANKS!!
Chris

[DivaVocals]

I could care less about Validation! :) I need to get my old copy of my local store setup to verify this before I make any live changes.

THANKS!!
Chris

Well validation IS important.. it's just not the holy grail that many believe it is..

Good luck..

[g2ktcf]

Well, changes made and its made little if any difference. The comment about folks being paid to "contact us" appears to be valid. I was tempted to filter the IPs but I am sure that I would end up getting some good emails with that approach as well.

So...I will keep using the delete button

[DarkAngel]

so since 1.5+ ahs its own spam detterent this mod is really not needed anymore?

Cause I installed it and then went to admin, set the layourt setting as instructed then clicked the link for captcha and the page comes up empty


Attachment 13503