Preventing spam

[Tomik]

Hi,

im currently getting allot of spam mails from russia (all with mail dot ru domain) is there anything i can do about the contact form that needs captcha or prevent russians :D

[wakabayashi]

@Generaal Why dont you use, the offical module from thirty bees? It stops the mail.ru attacks successfully: https://github.com/thirtybees/nocaptcharecaptcha/releases

You just have to take some minutes to set it up.

[wakabayashi]

Just saw this new blog post: https://thirtybees.com/blog/recaptcha-and-spam/?utmsource=back-office&utmmedium=rss&utmcampaign=back-office-CH&utmcontent=download

[Generaal]

Hello wakabayashi, I have installed the offical module in my TB test shop, but my life shop running on PS 1.6, there I have installed the captcha slider module. But I think, there are email server issues, that I have te manage.

[datakick]

@generaal I've looked into slide captcha source code, and I didn't find any actual server-side check in there. It seems to me that this is client-side verification only, so bots that don't execute javascript won't be stopped by this at all... which is kind a weird, considering this module should be aimed to exactly these bots.

I've actually tested this on your site - I didn't slide captcha, but I've manually removed 'display:none' and 'disabled' attributes from submit button (these were added by captcha javascript), and submitted form without problems. You can check in your back office if there's contact message from my email address. For bots, it's even easier. No javascript code was triggered, so submit button is very visible to them.

[Generaal]

Hello Petr, Hmm, thats not the solution to prevent bot's email sending. But you have to digging into the code to send your email, without using te slider. The PS life shop running until I have setup the TB to go life. In the test TB shop, I have the Google captcha module installed, hopely they works correct!

[vzex]

I was hit with the Russian bots this morning.

@wakabayashi @mdekker @lesley Thanks so much for the reCAPTCHA module it appears to be a quick fix to what I thought would be an overwhelming morning. Didn't know where to begin and right there on my dashboard TB news feed was the ReCaptcha and Spam blog link! Once again TB rocks!

Had a friend test for me he says chrome makes you tap twice it first drops you to the bottom of the page.

It works fine on my chrome so I'm not sure what is causing this.

My first thought was it is due to using Panda 1.3 theme?

Anyone running Panda 1.3 have this problem?

Also how to add captcha to Panda ST blog module?

Thanks!

[Tomik]

im using panda with a old version and it works here

[vzex]

Hm, perhaps it's a mad at USA/Canadian Olympics thing :hockey: :stuckouttonguewinkingeye:

Thanks for feedback! @Tomik @mdekker

Life took me away for a bit, looks like I have a lot of catching up to do!

[Briljander]

How did your spam start? I did get a lot of postmaster failure emails this morning. Looks like my server is spamming .ru adresses but I have asked my host to look in my exim log and they tell me there is no evidence of my server sending spam.

How can this happen if thats not the case? Does it have something to do with the auto responding email but I am not getting the first spam from contact form?

[jmeca]

If you have problems whit mail from .ru go to your email panel control an make a filter to reaching mail from .ru

[Tomik]

@jmeca that would still fill up the backoffice