2

We have unlike may others no spam problems with contributions, however the spam entry via the contact for got annoying. As well there is no problem with joomla-profile generation as this functionality is disabled.

The "contact form" profile has reCaptcha V2 enabled, however a specific spam bot network seems to be able to emulate human interaction. I say specific as the entries are similar and point to a specific source. I/P blocking does not work as I/P is changing, so I look for other solutions for our NGO.

I found no hint how to add a profile field whose result can be compared with a given value to prevent the form from being sent if false.

I found some honeypot instructions for contribution forms, but are not aware what files need to be modified for the contact form and how such coding may interact with update mechanisms. (over-writing)

So, if you have a tip, I will be glad to follow. Thank you.

Improve this question

2 Answers 2

Reset to default
3

I believe you have found this honeypot extension. (According to the documentation this one could be used for protecting the contribution forms.)

As far as i see, it uses hooks for extending the from and validation logic. It implements the build form hook here and the validate form hook here.

If i understand you well, you want to protect the profile forms with the honeypot solution.

The profile form is build in a different way, so that the hooks above can not be used here. Instead of them the build profile and validate profile hooks are triggered, so that you should implement them.

The civihoneypot extension provides a settings page where you can select the forms that you want to protect. I believe this settings form has to be extended also to be able to select profiles. The setting form is constructed here. I think the only thing that needs to be done here is adding a new entityref for uf_groups (those are the profiles), and the advcheckbox for the select all feature.

I hope it helps you.

Improve this answer
1
  • Thank you for your suggestions. Yes, the mentioned extension is the one. I give it a try. Unfortunately, I am more experienced with systems and database mgmt than programming, but I will install the extension and will look into the use of the hooks. I think I have seen some documents relating to this.
    – B e r t
    Commented Jul 23, 2021 at 8:14
2

In summary (i think) the honeypot extension currently works with Contribution pages. This pull extends it for Membership and Event pages, but does not yet work with standalone Profiles. The extension developers may welcome funding to add such a feature

Improve this answer
1
  • Thank you, petednz. Yes, the pull describes it well, but is closed. Probably the comments of @akosgarai are useful hints for this poll.
    – B e r t
    Commented Jul 23, 2021 at 8:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.