Spam Mails

Hi,

Could you post a link to where can see the form in question please?

Best regards,
Rikard

Hi,

Thank you for the update.

Have you tried using the Google reCAPTCHA option instead of the default captcha question? It’s a much better form of protection compare to the default captcha. Please visit the documentation for more info.

// https://kriesi.at/documentation/enfold/contact-form/#activate-google-captcha

And you should install plugins like Sucuri or WordFence to enchance the overall security of the site.

Best regards,
Ismael

Hi,

Thank you for the update.

1.) They probably found a way to bypass the captcha option. How? We don’t really know. It’s not really spam-proof, but it should be enough to prevent a lot of basic spam scripts. This is why you have to implement additional steps like installing a security plugin to protect the site against these scripts.

2.) Which question mark? Could you provide a screenshot?

Best regards,
Ismael

Hi,

Thank you for the screenshot.

That is the default behavior of the captcha field. If you want to remove the question mark while typing on the input field, try to edit the config-templatebuilder > aviashortcodes > contact > contact.js file, look for this code around line 31:

send.button.on('click', checkElements);

Below, add this code:

	var captcha = form.find('.captcha');
	label = form.find('.value_verifier_label');

captcha.focus(function() {
	var l = $(label.selector);
	var e = l.text();
	l.text(e.replace("?", ""));
});

Best regards,
Ismael

Hi,

Alright! Let us know if it helps. We’ll forward the request to the team for further considerations.

Best regards,
Ismael

Hi sthubertus,

Please open a new thread and include WordPress admin login details in private so that we can have a closer look at your site.

Best regards,
Rikard

Hi,

@sthubertus & @Blatze: Have you tried enabling the Google ReCAPTCHA option instead of using the default captcha? This should help prevent spams and unwanted emails. You could also install a security plugin such as WordFence to further enhance the site security.

Best regards,
Ismael

Hi,

Thank you for the update.

When the Google ReCAPTCHA is enabled, we could set the Privacy & Cookie > Cookie Handling > Default Cookie Behavior to the third or fourth option to prevent the spam protection scripts from loading without user consent. This should be in compliance with DSGVO rule and policy.

Best regards,
Ismael