Google reCAPTCHA and Enfold Contact Form

Thanks for posting this waveshaper and your response Basilis. I have had a recent jump in spam emails with Enfold contact forms with the math equation. It looks like it’s automated as well. I’d like to ask for the Recaptcha feature as well in a future release, perhaps add under the Google Services section.

waveshaper, i’ve been moving my contact forms over to Contact Form 7 which has Recaptcha integration and works great in keeping out spammers. The only drawback is that formatting can be a little off with the forms and the recaptcha box doesn’t look great on mobile.

My preference is the Enfold forms, they look great and are so quick to set up.

Thanks

A nice thing to have is also the reCaptcha for WordPress Login (by reCaptcha Plugin)

Ismael,

Although I thought I was, I’m not 100% getting that solution to work as it is blocking some valid users from clearing reCAPTCHA.
Have had a number of reoccurring customers say that it isn’t letting them submit their forms and isn’t giving any error, just doesn’t clear.

Inside https://www.google.com/recaptcha/admin#list I get the following error notification with no way to troubleshoot:
We detected that your site is not verifying reCAPTCHA solutions. This is required for the proper use of reCAPTCHA on your site.

I used the code found here https://kriesi.at/support/topic/starting-to-receive-spam-enquiries-from-contact-form-on-website/#post-817676
the only change I made to the value from data-sitekey=”xxxxxxxxxxxxxxxxxxxxxxxxxxx” provided by Google here
var publickey = 'YOUR PUBLIC API KEY';
didn’t change anything else or use my secret key at all

The full code I added is in the private content

I tried to use the code in the link: https://kriesi.at/support/topic/starting-to-receive-spam-enquiries-from-contact-form-on-website/#post-817676

I get no Google ReCaptcha. In fact, when I use the code as presented, the entire web site breaks and gives an error 500.
Is there any update to Kriesi adding this functionality formally since there are so many people who want to implement this function?

• This reply was modified 6 years, 5 months ago by dp012011.

Someone correct me if i’m wrong, but isn’t the “quick implementation” client-side only and thus virtually useless for actually preventing spam?

Example: Disable JavaScript in your browser of choice, and you’ll be able to submit the form without seeing the recaptcha at all.

Google’s setup guide explicitly describes two steps to set recaptcha up, 1. client-side (what the implementation linked in this thread does + enabling the submit button if the captcha passes). 2. server-side, validate the captcha serverside.

Unless the recaptcha is validated serverside (“never trust the client”), the only thing preventing a form submit is the disabled submit button. And that doesn’t happen with a spam script.

Ismael,

Will try your solution with the Secret Key validator, thanks for sharing.
I also agree with the spam concerns of others as the clients I have with Enfold do get a substantial amount more spam per 1000 visitors than with other forms. Not sure if that is a random thing or a lack of spam filtering/prevention.

Thanks again for all your work,
Jon