CAPTCHA on feedback module?

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

I'm getting spam messages through the feedback module and I don't know how to stop it. Is there a configuration to have it on?

nuken · Posted: Tue Mar 09, 2010 12:28 pm

In config.php, you can set $gfx_chk = to what ever level you want to.
0: No check
1: Administrators login only
2: Users login only
3: New users registration only
4: Both, users login and new users registration only
5: Administrators and users login only
6: Administrators and new users registration only
7: Everywhere on all login options (Admins and Users)

In rnconfig.php you can also adjust the level on select modules.

If you set feedback to registered users only in modules admin, you will also be able to avoid spam.

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

I want non-registered people to be able to send me a quick message, so making the module only available to registered users is not an option.

I have the CAPTCHA enabled for logins.

jakec · Posted: Tue Mar 09, 2010 1:50 pm

Check these settings in rnconfig.php

Code:

/*********************************************************************************
* Visual Captcha Configuration for Modules (to help prevent spam):
* You need to have GD extension installed:
* 0 = No Security Code
* 1 = Require Code for Anonymous ONLY
* 2 = Require Code for Registered ONLY
* 3 = Require Code for BOTH Anonymous and Registered
* NOTE: If the module name is present (defined here), then it means that module has
* had the new visual captcha applied to it and is controlled by setting the code
* value based on the above values.
**********************************************************************************/
$modGFXChk = array(
'Downloads' => 3,
'Feedback' => 3,
'News' => 3,
'Recommend_Us' => 3,
'Reviews' => 3,
'Submit_News' => 3,
'Surveys' => 3,
'Web_Links' => 3
);

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

interesting...Looks like mine is configured that way...

Only registered users can see links on this board!
Get registered or login to the forums!

from rnconfig:

Code:

/*********************************************************************************
* Visual Captcha Configuration for Modules (to help prevent spam):
* You need to have GD extension installed:
* 0 = No Security Code
* 1 = Require Code for Anonymous ONLY
* 2 = Require Code for Registered ONLY
* 3 = Require Code for BOTH Anonymous and Registered
* NOTE: If the module name is present (defined here), then it means that module has
* had the new visual captcha applied to it and is controlled by setting the code
* value based on the above values.
**********************************************************************************/
$modGFXChk = array(
'Downloads' => 1,
'Feedback' => 1,
'News' => 0,
'Recommend_Us' => 1,
'Reviews' => 0,
'Submit_News' => 0,
'Surveys' => 0,
'Web_Links' => 0
);

jakec · Posted: Tue Mar 09, 2010 2:07 pm

I am seeing the captcha. You may not see it if you are logged as Admin at the time.

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

hmmm, you know what...The captcha is there...so that must be that these people are breaking it somehow...should I copy the fully headers here? The content of the emails are easily found all over the web when you google search for them. not really coming from the same IP, so i can't block them that way....

jakec · Posted: Tue Mar 09, 2010 2:09 pm

Are you using the latest version of RN?

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

I am on 2.3.x I was waiting for the new release to go to 2.4.x is that a fixed bug?

jakec · Posted: Tue Mar 09, 2010 2:24 pm

That's what I am just wondering, I don't recall anything specifically.

Can you have a look at your logs because it might reveal if they are managing to bypass the captcha.

jakec · Posted: Tue Mar 09, 2010 2:31 pm

If you find something please send me a PM and we will look into it.

sixf00t4 · Regular Joined: Nov 05, 2006 Posts: 96

the messages are coming from IP 194.44.228.34, if you do a search on google, you'll see the most common spam messages i'm getting (ie: unique-papers, loans, essay writing, etc) seems like they're originating from the ukraine as all of them have been 194.44.x.x

Not sure how they're getting past the captcha though. where in the log is there an "ok" for captcha?

montego · Posted: Sat Mar 13, 2010 6:21 pm

I am starting to get a few of these per week. I suspect that these are individual human beings doing the spamming for very little $. Maybe. If I were seeing many per day and more back-to-back, I'd be inclined to think "captcha break"... however, I would also be seeing much more spam in more search engine crawlable pages then I would think... hence still thinking a human being at the keyboard.