Viewing 20 posts - 1 through 20 (of 20 total)
  • Author
    Posts
  • #1438820

    This is intermittent, but it has happened 3 times today as I’ve been testing the form. It happened when I used the Enfold math verification thing, and it happens with Google Recaptcha v2 (it tests fine in Enfold Child options).

    Here is the email I got from the form:
    퍍ⷔ㽪㬤ꊧ交῔샠磚띔샑鮐㧵駯້힡禩択ܨ頪➵伪庵ﺙ媊眡檻Ặ➵亶Ʇቷ⡶⧠涫ừ蓦ᛖ厢҆蚀키勔혖雃ꈇ㛦猃ʹچ혖雂킥㝖⚦嘷䎢҆蚀킥چ厢̓ጓጓጓጓაꃐꓖ圷㘖癓ꃐꐧ暆ꚶ⃐ꃐ괴틝䏶ꎲ䨪瓪䇽䰎ލꭵ乸簍ᦹΟ妞鈆굺រ阩覂ꉻ庞퓲ꗫ廆뙩岅ꫬ竛굿삨黗Ꞵ能၏㣯溄폑㤓輁ݯ㳯�୍篧渧橪歷巩꺇梺ꉇ⢘⨧뗩뚧뇷ꬒ眨瘩꬞욇䛖쏠킣욆嘖䏠킣웖坆ሆ蝇䜂홗᝖靣툤㛶囧䋕䞗ْ∆㛶囧䏒❆垇䋶蝆훃눆㚆ᜧ㙗䏗坆拓舣ꏂ嘖䏠킣옦鏠키홓ꈄ蚆舃옧⏠키勔혖雃ꈇ㛦猃ʹچ혖雂φ✣ꔷ嘦Ꙗ㝃ꈄ蚆舃옧⏠킥چ厢̓ጓጓጓጓሃ옧⏠킣옧⏠키홗㜶ᙶ厢φ✣ꐧ暆ꚶ∃옧⏠킣옧⏠킣싶⛶䞓ꏂ䛖쏠킣䴴띐ﶨ誝㪐罓΁鸟͆

    ***By the way, as a point of interest, google Translator only identified Bird, erosion, tarantula, and house.***

    #1438898

    Hey gatehealing,

    Did you try using reCAPTCHA version 3 to see if that works better?

    Best regards,
    Rikard

    #1438917

    I’m not sure I have the right stuff to activate it—should it already be in place?

    J

    #1438978

    Hi,

    It should be located in the same place as where you generate the version 2 token, please check there. https://developers.google.com/recaptcha/intro

    Best regards,
    Rikard

    #1439011

    Ya, I got it working. The problem is, with those security features, it takes 10-15 seconds for the ReCaptcha to approve … long enough that when I was testing I instinctively assumed it was done because I pressed “something” . . . you’ll see I put a note under the submit button … but for the submit button to stop having stripes and become active, it’s 10-15 seconds.

    I was getting spam without the security . . . what’s odd is that I did not get spam before (even when the form was working) and I didn’t have security up.

    J

    #1439032

    I completely disabled the reCaptcha thing in Enfold Child options, and turned it off in the contact form element. It happened again when I tested it

    #1439040

    Hi,

    Thank you for the update.

    Unfortunately, we are not sure what could be causing this issue as it is the first time we have encountered it. We recommend temporarily using a different contact form plugin, such as Contact Form 7 or WPForms, and installing their extensions to improve security

    Best regards,
    Ismael

    #1439118

    I have wpforms light I think

    #1439129

    Hi,

    Thanks for the update. Please try using a plugin for now, to see if any spam comes through after that.

    Best regards,
    Rikard

    #1439134

    It happens with wp forms too . . . intermittent though. Any idea where where I should start to figure this out? I don’t know that it’s y’all…sounds like it’s not as you’ve never seen it.

    #1439142

    Hi,

    Thank you for the update.

    Is the issue occurring when the plugins are deactivated (excluding the contact form)? You should also consider downloading the latest version of WordPress and replacing your current installation to eliminate any compromised files if there’s any. Did you add anything in the child theme’s functions.php file?

    Best regards,
    Ismael

    #1439146

    Did that today and am trying cloudflare turnstile for spam/security,

    I’ll keep testing for a few days.

    J

    • This reply was modified 7 months, 3 weeks ago by gatehealing.
    #1439148

    Well, just tested and here’s the result:
    moved to pastebin: https://pastebin.com/hcDHfdrL

    #1439150

    Oh, I’ve only added the code to the functions.php that y’all have told me to put in there. I copied/pasted exactly as y’all had it shown.

    J

    #1439188

    Hi,
    As I understand you are using cloudflare with Google Recaptcha v2 and when you use either the Enfold contact form or wpforms sometimes the email come in Chinese.
    Is this correct? I don’t think that you are using a multi language site nor using Chinese, and it looks like you have tried disabling everything except the cloudflare.
    Your pastebin code was removed so we can’t see it. Try disabling the cloudflare.
    Also try using WP Mail SMTP so your mail is sent though your webhost SMTP mail server instead of the standard PHP mail that WordPress uses. You will want to use the “Other SMTP” option in the plugin and then get your SMTP server info from your webhost, this video should help you set it up
    I would recommend using SMTP for your site email anyways, so if this doesn’t help with the Chinese issue, it will help with your overall WordPress mail, so it is worth the extra steps.

    Best regards,
    Mike

    #1439435

    WP mail smtp requires a subscription to use my microsoft365 mailer. I could not get it to work with gmail api (even though I have successfully used google/gmail api several times before). So I found an smtp plugin that lets me use microsoft365 for free. This works, but I still get the Chinese stuff intermittently.

    I’m not even sure all those characters are Chinese. . . google translate only saw 2 words. That’s why I think it is some sort of code. This issue occurs with WP Mail once I got

    The pastebin was just a much longer box of gibberish symbols (possibly Chinese and something else).

    J

    #1439438

    Hi,
    Sorry I thought you might have a simple SMTP mail service from your webhost, nonetheless I see that you are uing a CDN and when I load your contact page I see the file:
    https://your-site.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
    this file is from your CDN and the contents look like it is encoding/decoding characters in your email, based on this: String.fromCharCode(l)
    I don’t know what this is used for, but perhaps you are right that this is not Chinese but some encoding?
    I would try asking your CDN or disable it from your site for a few days and see if this still happens when the file is not used anymore.

    Best regards,
    Mike

    #1439461

    Oh, let me check. Dream Host is my host.
    J

    #1439520

    They just suggest WP mail smtp plugin.

    #1439537

    Hi,
    Perhaps they don’t know how the javascript file email-decode.min.js was added, my research points to a Cloudflare Email Address Obfuscation option in your Cloudflare settings. I don’t use Cloudflare but see if you can find it. I still recommend completely disabling Cloudflare from your site and see if this helps, it will probably take a few hours for it to be disabled and the cache to be cleared enough for you to test, but I’m pretty sure that this error is from something other than the theme, like a plugin or external service, since my test site doesn’t have this error and we have not seen any other reports of this.

    Best regards,
    Mike

Viewing 20 posts - 1 through 20 (of 20 total)
  • You must be logged in to reply to this topic.