Hello Rikard,

Thanks for the reply. Yes, very sure that the spam messages get sent through the contact forms, since I have a contact form submission DB plugin that captures all messages (https://www.vovcollection.com/wp-admin/admin.php?page=CF7DBPluginSubmissions).

Please find the login credentials in the private content. Most spam messages are coming from the first contact form on this page: https://www.vovcollection.com/palazzi-venice/ca-delle-vele/

FYI I activated recaptcha by adding this code to functions.php:

function ava_custom_recaptcha(){
?>
<script type=”text/javascript”>
var createCaptcha = function() {
var button = jQuery(“.avia_ajax_form .button”),
parent = button.parent(“.form_element”);
captcha = jQuery(“<p id=’reCAPTCHAV2′></p>”);

button.attr(“disabled”, “disabled”);
captcha.insertBefore(parent);
};

createCaptcha();

var onloadCallback = function() {
var publickey = ‘6LeffS8UAAAAADBZNN41EIfFxuaq9oIZ4iMeoIoi’;
grecaptcha.render(‘reCAPTCHAV2’, {
‘sitekey’ : publickey,
‘callback’ : ‘onSuccessfullCallback’
});
};

var onSuccessfullCallback = function() {
jQuery(“input[type=submit]”).removeAttr(‘disabled’);
};
</script>
<?php
}
add_action(‘wp_footer’, ‘ava_custom_recaptcha’);

if(!function_exists(‘avia_register_reCAPTCHAV2_scripts’))
{
if(!is_admin()){
add_action(‘wp_enqueue_scripts’, ‘avia_register_reCAPTCHAV2_scripts’);
}

function avia_register_reCAPTCHAV2_scripts()
{
$prefix = is_ssl() ? “https” : “http”;
$api_url = $prefix.’://www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit’;

wp_register_script( ‘avia-google-reCAPTCHAV2-api’, $api_url, array(‘jquery’), NULL, true);
wp_enqueue_script( ‘avia-google-reCAPTCHAV2-api’ );
}
}

I still think that blocking messages hyperlinks might be a good idea but please let me know your thoughts,
Thanks,

JD

Hello Rikard,

Thanks for your prompt reply. Admin login details in private.

Keep me posted,
Cheers,

JD