Receiving spam e-mails from HTML contact form

[brillarmory]

Update: I added Google Recapcha to the Contact form. No one can e-mail me without clicking the Recaptcha box now.

Still receiving more spam than ever. I wonder how the bots are able to circumvent the Recaptcha...

[mprough]

Update: I added Google Recapcha to the Contact form. No one can e-mail me without clicking the Recaptcha box now.

Still receiving more spam than ever. I wonder how the bots are able to circumvent the Recaptcha...

Might be real person spammers or it's not installed correctly. Have a link to your website?

[brillarmory]

Might be real person spammers or it's not installed correctly. Have a link to your website?

https://www.brillarmory.com/index.ph...age=contact_us

[Design75]

https://www.brillarmory.com/index.ph...age=contact_us

You make it real easy for spammers to find you, since you typed out your email addresses in full on the contact page.
They are not using the form, but harvest the addresses form the page.

[brillarmory]

You make it real easy for spammers to find you, since you typed out your email addresses in full on the contact page.
They are not using the form, but harvest the addresses form the page.

Those e-mails I typed out on my page get sent to my protonmail addresses; none of which have received spam yet. All of the HTML form inquiries are sent to my gmail account. All of the spam I receive is in gmail and uses the subject line "Website Inquiry from Brill Armory" -- which also tells me it's from the HTML form.

[Design75]

Those e-mails I typed out on my page get sent to my protonmail addresses; none of which have received spam yet. All of the HTML form inquiries are sent to my gmail account. All of the spam I receive is in gmail and uses the subject line "Website Inquiry from Brill Armory" -- which also tells me it's from the HTML form.

Okay, then you have been lucky with the typed out addresses.

Before you added the captcha, are you sure you had the extra hidden field in place? because I can not seem to find it now.

[mc12345678]

One thing that is missing is the honeypot. Should check for differences between includes/templates/theme692/templates/tpl_contact_us_default.php and the file of the same name in the template_default directory.

As to the recaptcha, not sure if there is now some sort of cookie associated with recaptcha or if it is site specific, but I know there is a site that I frequently visit that uses a recaptcha and I haven't been asked to select or enter the verification information in quite a while after clicking the check box...

In fact, when filling out the contact us form at this site, once I clicked the checkbox, it didn't ask for any further confirmation...

[brillarmory]

One thing that is missing is the honeypot. Should check for differences between includes/templates/theme692/templates/tpl_contact_us_default.php and the file of the same name in the template_default directory.

As to the recaptcha, not sure if there is now some sort of cookie associated with recaptcha or if it is site specific, but I know there is a site that I frequently visit that uses a recaptcha and I haven't been asked to select or enter the verification information in quite a while after clicking the check box...

In fact, when filling out the contact us form at this site, once I clicked the checkbox, it didn't ask for any further confirmation...

Thanks for the insight. I looked over this with my coder and he applied a fix. I haven't received any spam since he applied it days ago.

[keneso]

Thanks for the insight. I looked over this with my coder and he applied a fix. I haven't received any spam since he applied it days ago.

Care to share the fix please?

[RixStix]

We added a couple of global filters into the server email system (cpanel) to check for 2 or 3 of the most common chinese or russian characters in the subject and/or body. If true, DELETE.