-
AuthorPosts
-
March 31, 2024 at 5:32 am #1438820
This is intermittent, but it has happened 3 times today as I’ve been testing the form. It happened when I used the Enfold math verification thing, and it happens with Google Recaptcha v2 (it tests fine in Enfold Child options).
Here is the email I got from the form:
퍍ⷔ㽪㬤ꊧ交샠磚띔샑鮐㧵駯້힡禩択ܨ頪➵伪庵ﺙ媊眡檻Ặ➵亶Ʇቷ⡶⧠涫ừ蓦ᛖ厢҆蚀키勔혖雃ꈇ㛦猃ʹچ혖雂킥㝖⚦嘷䎢҆蚀킥چ厢̓ጓጓጓጓაꃐꓖ圷㘖癓ꃐꐧ暆ꚶ⃐ꃐ괴틝䏶ꎲ䨪瓪䇽䰎ލꭵ乸簍ᦹΟ妞鈆굺រ阩覂ꉻ庞퓲ꗫ廆뙩岅ꫬ竛굿삨黗Ꞵ能၏㣯溄폑㤓輁ݯ㳯�୍篧渧橪歷巩꺇梺ꉇ⢘⨧뗩뚧뇷ꬒ眨瘩욇䛖쏠킣욆嘖䏠킣웖坆ሆ蝇䜂홗靣툤㛶囧䋕䞗ْ∆㛶囧䏒❆垇䋶蝆훃눆㚆ᜧ㙗䏗坆拓舣ꏂ嘖䏠킣옦鏠키홓ꈄ蚆舃옧⏠키勔혖雃ꈇ㛦猃ʹچ혖雂φ✣ꔷ嘦Ꙗ㝃ꈄ蚆舃옧⏠킥چ厢̓ጓጓጓጓሃ옧⏠킣옧⏠키홗㜶ᙶ厢φ✣ꐧ暆ꚶ∃옧⏠킣옧⏠킣싶⛶䞓ꏂ䛖쏠킣䴴띐ﶨ誝㪐罓鸟͆***By the way, as a point of interest, google Translator only identified Bird, erosion, tarantula, and house.***
April 1, 2024 at 3:33 pm #1438898Hey gatehealing,
Did you try using reCAPTCHA version 3 to see if that works better?
Best regards,
RikardApril 1, 2024 at 5:41 pm #1438917I’m not sure I have the right stuff to activate it—should it already be in place?
J
April 2, 2024 at 11:07 am #1438978Hi,
It should be located in the same place as where you generate the version 2 token, please check there. https://developers.google.com/recaptcha/intro
Best regards,
RikardApril 2, 2024 at 6:04 pm #1439011Ya, I got it working. The problem is, with those security features, it takes 10-15 seconds for the ReCaptcha to approve … long enough that when I was testing I instinctively assumed it was done because I pressed “something” . . . you’ll see I put a note under the submit button … but for the submit button to stop having stripes and become active, it’s 10-15 seconds.
I was getting spam without the security . . . what’s odd is that I did not get spam before (even when the form was working) and I didn’t have security up.
J
April 3, 2024 at 1:21 am #1439032I completely disabled the reCaptcha thing in Enfold Child options, and turned it off in the contact form element. It happened again when I tested it
April 3, 2024 at 5:11 am #1439040Hi,
Thank you for the update.
Unfortunately, we are not sure what could be causing this issue as it is the first time we have encountered it. We recommend temporarily using a different contact form plugin, such as Contact Form 7 or WPForms, and installing their extensions to improve security
Best regards,
IsmaelApril 3, 2024 at 8:43 pm #1439118I have wpforms light I think
April 3, 2024 at 9:19 pm #1439129Hi,
Thanks for the update. Please try using a plugin for now, to see if any spam comes through after that.
Best regards,
RikardApril 3, 2024 at 11:26 pm #1439134It happens with wp forms too . . . intermittent though. Any idea where where I should start to figure this out? I don’t know that it’s y’all…sounds like it’s not as you’ve never seen it.
April 4, 2024 at 6:34 am #1439142Hi,
Thank you for the update.
Is the issue occurring when the plugins are deactivated (excluding the contact form)? You should also consider downloading the latest version of WordPress and replacing your current installation to eliminate any compromised files if there’s any. Did you add anything in the child theme’s functions.php file?
Best regards,
IsmaelApril 4, 2024 at 6:57 am #1439146Did that today and am trying cloudflare turnstile for spam/security,
I’ll keep testing for a few days.
J
- This reply was modified 7 months, 3 weeks ago by gatehealing.
April 4, 2024 at 7:00 am #1439148Well, just tested and here’s the result:
moved to pastebin: https://pastebin.com/hcDHfdrLApril 4, 2024 at 7:05 am #1439150Oh, I’ve only added the code to the functions.php that y’all have told me to put in there. I copied/pasted exactly as y’all had it shown.
J
April 4, 2024 at 12:02 pm #1439188Hi,
As I understand you are using cloudflare with Google Recaptcha v2 and when you use either the Enfold contact form or wpforms sometimes the email come in Chinese.
Is this correct? I don’t think that you are using a multi language site nor using Chinese, and it looks like you have tried disabling everything except the cloudflare.
Your pastebin code was removed so we can’t see it. Try disabling the cloudflare.
Also try using WP Mail SMTP so your mail is sent though your webhost SMTP mail server instead of the standard PHP mail that WordPress uses. You will want to use the “Other SMTP” option in the plugin and then get your SMTP server info from your webhost, this video should help you set it up
I would recommend using SMTP for your site email anyways, so if this doesn’t help with the Chinese issue, it will help with your overall WordPress mail, so it is worth the extra steps.Best regards,
MikeApril 7, 2024 at 9:04 pm #1439435WP mail smtp requires a subscription to use my microsoft365 mailer. I could not get it to work with gmail api (even though I have successfully used google/gmail api several times before). So I found an smtp plugin that lets me use microsoft365 for free. This works, but I still get the Chinese stuff intermittently.
I’m not even sure all those characters are Chinese. . . google translate only saw 2 words. That’s why I think it is some sort of code. This issue occurs with WP Mail once I got
The pastebin was just a much longer box of gibberish symbols (possibly Chinese and something else).
J
April 7, 2024 at 9:56 pm #1439438Hi,
Sorry I thought you might have a simple SMTP mail service from your webhost, nonetheless I see that you are uing a CDN and when I load your contact page I see the file:
https://your-site.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
this file is from your CDN and the contents look like it is encoding/decoding characters in your email, based on this: String.fromCharCode(l)
I don’t know what this is used for, but perhaps you are right that this is not Chinese but some encoding?
I would try asking your CDN or disable it from your site for a few days and see if this still happens when the file is not used anymore.Best regards,
MikeApril 8, 2024 at 5:04 am #1439461Oh, let me check. Dream Host is my host.
JApril 8, 2024 at 7:01 pm #1439520They just suggest WP mail smtp plugin.
April 9, 2024 at 12:46 am #1439537Hi,
Perhaps they don’t know how the javascript fileemail-decode.min.js
was added, my research points to a Cloudflare Email Address Obfuscation option in your Cloudflare settings. I don’t use Cloudflare but see if you can find it. I still recommend completely disabling Cloudflare from your site and see if this helps, it will probably take a few hours for it to be disabled and the cache to be cleared enough for you to test, but I’m pretty sure that this error is from something other than the theme, like a plugin or external service, since my test site doesn’t have this error and we have not seen any other reports of this.Best regards,
Mike -
AuthorPosts
- You must be logged in to reply to this topic.