CAPTCHA on feedback module?

registered · Regular Joined: Nov 05, 2006 Posts: 96

I'm getting spam messages through the feedback module and I don't know how to stop it. Is there a configuration to have it on?

registered · Posted: Tue Mar 09, 2010 12:28 pm

In config.php, you can set $gfx_chk = to what ever level you want to.
0: No check
1: Administrators login only
2: Users login only
3: New users registration only
4: Both, users login and new users registration only
5: Administrators and users login only
6: Administrators and new users registration only
7: Everywhere on all login options (Admins and Users)

In rnconfig.php you can also adjust the level on select modules.

If you set feedback to registered users only in modules admin, you will also be able to avoid spam.

Posted: Tue Mar 09, 2010 12:41 pm

I want non-registered people to be able to send me a quick message, so making the module only available to registered users is not an option.

I have the CAPTCHA enabled for logins.

Posted: Tue Mar 09, 2010 1:50 pm

Check these settings in rnconfig.php

Code:

/*********************************************************************************


* Visual Captcha Configuration for Modules (to help prevent spam):


* You need to have GD extension installed:


*   0 = No Security Code


*   1 = Require Code for Anonymous ONLY


*   2 = Require Code for Registered ONLY


*   3 = Require Code for BOTH Anonymous and Registered


* NOTE: If the module name is present (defined here), then it means that module has


* had the new visual captcha applied to it and is controlled by setting the code


* value based on the above values.


**********************************************************************************/


$modGFXChk = array(


    'Downloads' => 3,


    'Feedback' => 3,


    'News' => 3,


    'Recommend_Us' => 3,


    'Reviews' => 3,


    'Submit_News' => 3,


    'Surveys' => 3,


    'Web_Links' => 3


);

Posted: Tue Mar 09, 2010 2:05 pm

interesting...Looks like mine is configured that way...

http://joshuadhall.com

from rnconfig:

Code:

/*********************************************************************************


* Visual Captcha Configuration for Modules (to help prevent spam):


* You need to have GD extension installed:


*   0 = No Security Code


*   1 = Require Code for Anonymous ONLY


*   2 = Require Code for Registered ONLY


*   3 = Require Code for BOTH Anonymous and Registered


* NOTE: If the module name is present (defined here), then it means that module has


* had the new visual captcha applied to it and is controlled by setting the code


* value based on the above values.


**********************************************************************************/


$modGFXChk = array(


    'Downloads' => 1,


    'Feedback' => 1,


    'News' => 0,


    'Recommend_Us' => 1,


    'Reviews' => 0,


    'Submit_News' => 0,


    'Surveys' => 0,


    'Web_Links' => 0


);

Posted: Tue Mar 09, 2010 2:07 pm

I am seeing the captcha. You may not see it if you are logged as Admin at the time.

Posted: Tue Mar 09, 2010 2:08 pm

hmmm, you know what...The captcha is there...so that must be that these people are breaking it somehow...should I copy the fully headers here? The content of the emails are easily found all over the web when you google search for them. not really coming from the same IP, so i can't block them that way....

Posted: Tue Mar 09, 2010 2:09 pm

Are you using the latest version of RN?

Posted: Tue Mar 09, 2010 2:14 pm

I am on 2.3.x I was waiting for the new release to go to 2.4.x is that a fixed bug?

Posted: Tue Mar 09, 2010 2:24 pm

That's what I am just wondering, I don't recall anything specifically.

Can you have a look at your logs because it might reveal if they are managing to bypass the captcha.

Posted: Tue Mar 09, 2010 2:31 pm

If you find something please send me a PM and we will look into it.

Posted: Tue Mar 09, 2010 9:27 pm

the messages are coming from IP 194.44.228.34, if you do a search on google, you'll see the most common spam messages i'm getting (ie: unique-papers, loans, essay writing, etc) seems like they're originating from the ukraine as all of them have been 194.44.x.x

Not sure how they're getting past the captcha though. where in the log is there an "ok" for captcha?

registered · Posted: Sat Mar 13, 2010 6:21 pm

I am starting to get a few of these per week. I suspect that these are individual human beings doing the spamming for very little $. Maybe. If I were seeing many per day and more back-to-back, I'd be inclined to think "captcha break"... however, I would also be seeing much more spam in more search engine crawlable pages then I would think... hence still thinking a human being at the keyboard.