Forums / All Other Contributions/Addons / What modules are people using to prevent contact us page spam

What modules are people using to prevent contact us page spam

Views: 1,978

Results 1 to 13 of 13
19 Nov 2014, 2:26 AM
#1
rad1964 avatar

rad1964

New Zenner

Join Date:
Sep 2006
Posts:
64
Plugin Contributions:
0

What modules are people using to prevent contact us page spam

What modules are people using to prevent contact us page spam?
I noticed there are NO modules up-to-date aka 1.5.3 for captcha or recaptcha.

Our site went live yesterday and already receiving spam!

Thank you for your time,
Robert

19 Nov 2014, 2:48 AM
#2
bislewl avatar

bislewl

Totally Zenned

Join Date:
Dec 2011
Location:
Wisconsin, USA
Posts:
674
Plugin Contributions:
12

Re: What modules are people using to prevent contact us page spam

I have used the reCaptcha, Numinix's Match Captcha.

However the most successful one I have used, that users seem to not mind is:

1.) Creating an additional field in contact us form. Call it something obvious like email_address (email is used in the form).
2.) Hide the field using CSS (most bots don't use CSS)
3.) Change the form to not email, when the field has anything present, it skips the zen_mail function, there for not flagging spam that there was an error.

19 Nov 2014, 3:57 AM
#3
rad1964 avatar

rad1964

New Zenner

Join Date:
Sep 2006
Posts:
64
Plugin Contributions:
0

Re: What modules are people using to prevent contact us page spam

So are you saying that you used a module that says it is only compliant up to version 1.5.1 for version 1.5.3?

19 Nov 2014, 2:03 PM
#4
rixstix avatar

rixstix

Totally Zenned

Join Date:
Aug 2009
Location:
North Idaho, USA
Posts:
2,015
Plugin Contributions:
0

Re: What modules are people using to prevent contact us page spam

It could be template related. Some implementations of the contact us in the megamenu are not identical to the built-in contact us functionality and are susceptible to spam.

Depending upon your template choice, if applicable, try disabling the contact form used in the megamenu and leave the default contact form and see if that helps. I think v1.5.3 has the hidden field built into the form.

Rick
RixStix (dot) com
aka: ChainWeavers (dot) com

19 Nov 2014, 3:54 PM
#5
bunster avatar

bunster

New Zenner

Join Date:
Jan 2006
Posts:
40
Plugin Contributions:
0

Re: What modules are people using to prevent contact us page spam

You could also try using something like ZBblock (spambotsecurity dot com) to stop them getting to your contact page

I've been using it for a couple of months and it's working great.

Bunster

Nothing worth having ever comes easy, so don't give up!

19 Nov 2014, 4:50 PM
#7
bislewl avatar

bislewl

Totally Zenned

Join Date:
Dec 2011
Location:
Wisconsin, USA
Posts:
674
Plugin Contributions:
12

Re: What modules are people using to prevent contact us page spam

I would have to agree about 80% of the spam I was seeing was coming from the mega menu.

19 Nov 2014, 6:37 PM
#8
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: What modules are people using to prevent contact us page spam

RAD1964:

What modules are people using to prevent contact us page spam?
I noticed there are NO modules up-to-date aka 1.5.3 for captcha or recaptcha.

Our site went live yesterday and already receiving spam!

Thank you for your time,
Robert

Btw, the lack of indication of upwards compatibility does not necessarily mean that the plugin is not compatible. The implementation in a newer version may be slightly different (different line number if provided), but the lack of indication primarily indicates that effort hasn't been taken to notify the site administrators of the applicability/ability.

I thought google recaptcha was compatible with 1.5.3, but implementation on the megamenu is less than optimal (reduced size makes an already difficult to read option only more difficult.)

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...

19 Nov 2014, 9:06 PM
#9
rad1964 avatar

rad1964

New Zenner

Join Date:
Sep 2006
Posts:
64
Plugin Contributions:
0

Re: What modules are people using to prevent contact us page spam

Well I had already removed the Mega Menu from the top and the only link is in my footer which goes to the main form. I just visited the ZB Block site and downloaded their package. Depending on the complexity of installing, I might also try a non updated recaptcha. Nobody likes clients whining about spam :D

19 Nov 2014, 9:33 PM
#10
rad1964 avatar

rad1964

New Zenner

Join Date:
Sep 2006
Posts:
64
Plugin Contributions:
0

Re: What modules are people using to prevent contact us page spam

templates/template_default/templates/tpl_contact_us_default.php
I believe this is the proper 'regular' contact us form. Just wanted to confirm. I couldn't find any contact us under the sheffield folder.

19 Nov 2014, 10:29 PM
#11
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: What modules are people using to prevent contact us page spam

RAD1964:

Well I had already removed the Mega Menu from the top and the only link is in my footer which goes to the main form.

Double check your source code of when the page is presented to the browser. As mentioned in the linked thread above, do not use css to hide the contact us form of the mega menu. The code is still present and can be acted upon by those that are out to send spam. The code must be modified to handle the situation.

See, CSS (Cascade Style Sheets) apply formatting to the page, they do not modify the content of the original page. Therefore in a low-tech situation, the css can be ignored with the background page content "used"/shown. So even in the case of a link that is hidden by css, the link is still served. Now consider search engines, they have gone to "respecting" the css and ignoring the hidden content, though I could be wrong about the ignore part as they may also count that content against the site/page as it may be seen as stuffing the page with information...

So like said, don't use css to "hide" the megamenu contact us form as it is still on the served page and possible to abuse when provided as is.

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...

19 Nov 2014, 11:13 PM
#12
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: What modules are people using to prevent contact us page spam

bislewl:

the most successful one I have used, that users seem to not mind is:

1.) Creating an additional field in contact us form. Call it something obvious like email_address (email is used in the form).
2.) Hide the field using CSS (most bots don't use CSS)
3.) Change the form to not email, when the field has anything present, it skips the zen_mail function, there for not flagging spam that there was an error.Just to be clear, that's built in to Zen Cart by default. But it only works correctly if one uses the built-in template files. Adding another template that's not containing that feature defeats its protections.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

19 Nov 2014, 11:20 PM
#13
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: What modules are people using to prevent contact us page spam

DrByte:

Just to be clear, that's built in to Zen Cart by default. But it only works correctly if one uses the built-in template files. Adding another template that's not containing that feature defeats its protections.

In this case, there is code in the default template files that can be included/incorporated into the megamenu. Although, even with that some spammers have figured out a way to bypass it as well. But at a less frequent basis than not using the added code.

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...