Spam from Contact Us form...

[Walrus]

A while back, I installed the free slider anti-spam module on the Contact Us page but it didn't stop spam, so I installed Google reCAPTCHA and that hasn't stopped the spam either. 

 

This pointed to a weakness in the form, IMV, as previous cart had a simple image verification but the form was more complicated when compared to the Prestashop form (to my eyes, at least) so that may be why we never received *any* spam. I bugged it but it was dismissed as reCAPTCHA was installed.

 

Question:  How are spammers able to bypass reCAPTCHA? Spam messages are sent at the same time, indicating they are sent by a spambot.

[vekia]

how you applied recaptcha there? you modified the .php controller properly?

[Walrus]

Hi Vekia -- I used this free module: https://www.prestashop.com/forums/topic/442633-add-recaptcha-to-prestashop-version-16014-for-free/

 

I am also using a custom theme if it makes a difference. The contact-form.tpl has some pop-up menus for selecting orders when customer is logged in but otherwise appears to be same as default. 

[vekia]

module doesnt block form from submit, it only adds recaptcha, but if bot sent before the form, it will be able to sent it even with this module.

it is necessary to change controllers. this is the only way to protect form.

[Walrus]

A bit confused...Do you mean if spammer had sent before reCAPTCHA was added, he would still be able to unless you change controllers? If that is a correct reading, what do you need to change in controllers?

[citochris]

I have the same problem, I installed Sliders but the spammer is still using my contact form for spamming.

 

A simple solution would be not to send the copy to the email the spammer gives (in my case its always yahoo adresses) but only to me.

 

If the mail goes only to me I will just delete it, but if the copy goes to others my server will be blacklisted.

 

Any idea how I can change the sending so it will be send only to me?

[bellini13]

just add the reCAPTCHA to your contact form and also the contact controller, make sure it checks that the reCaptcha passed...

[tpresta]

To block spam email from a specific domain such as mail.ru you can use cPanel. Here is a step by step guide.

1) Log into your cPanel and go to Spam Experts or Spam Assassin.  For this example we will use "Spam Experts"

2) Click the manage button beside your actual domain

3) Scroll down and click  "Sender Blacklist"

 

4) Click the box "Sender Blacklist"

 

5) Click "Add blacklist sender"

 

6) Enter the email address which can include a wildcard * see screenshot example.

 

7) Please then wait 2 to 24 hours for the blocking to propagate and take effect.

 

 

Edited March 22, 2018 by tpresta
updated (see edit history)

[Naldinho]

On 8/30/2015 at 1:44 PM, vekia said:

 

it is necessary to change controllers. this is the only way to protect form.

2

 

What do you mean by change controllers? I've been having 5-6 Russian e-mails per day for the last few weeks.