Toggle sidebar

Wordpress - Contact Form Spam

  • Thread starter Thread starter A Party Shop
  • Start date Start date
Sort by date Sort by votes
A

A Party Shop

Our Party Blog is built with Wordpress.

We seem to have eradicated comment spam but every time we make a new blog post, a wave of spam then arrives via our contact form.

I know it's from the contact form as it says [your-subject] and at the bottom of the email "This mail is sent via contact form on A Party Shop Blog http://www.apartyshop.co.uk/blog"

Any suggestions on how we can rid this PITA?
 
One trick we used in the old days was to include an empty hidden field in the contact form. Then if the hidden field included some content it was probably spam and we discarded that entry.

Most spambots tries to fill out every form field and they cannot know that the specific hidden field should be empty.

That demands some local development and implementation, but i'm sure there's a plugin out there which does something similar. Most contact form plugins in the wordpress repository has some kind of spam protection. :-)
 
  • Like
Reactions: dmcn
Upvote 0
As Jonathon said, install Akismet and a lot will die off.

There are settings to change which will help as well:

settings > discussion

tick 'Automatically close comments on articles older than 14 days ' change 14 to something like 28.

tick 'Comment author must have a previously approved comment'

Common moderation:

hold a comment in the queue if it contains 2 links, change to 1
 
Upvote 0
As has been stated already so far, which ever contact form plugin you are using, make sure you have added a Captcha to it, (either via the options within the particular plugin or by installing an addon).

Furthermore, on installing Wordpress you should have Akismet ready to activate. Follow the instructions to get your API, this will also help minimize Spam.

Together these options will combat spam very efficiently indeed.
 
Upvote 0
the easiest way would be Captcha. this has been around for a very long time but is very effective, but i hate them and i am sure many others do to. For one of my clients i had installed a captcha plugin that would be a simple maths question. Its definitely much more user friendly then the distorted letters.
 
Upvote 0
Upvote 0
fisicx said:
Askimet won't block contact form spam, it's for blog comment only.
Click to expand...

Zis is incorrect. Akismet works seamlessly with Contact Form 7. Other than Gravity Forms it's the best contact form out there and it is free. Plus the OP is already using CF7, which is the recommended form the theme developer. No point uninstalling it and having to use another one.

Faevilangel said:
There are addon's for CF7 etc which makes Akismet work
Click to expand...

No add ons required, it's inbuilt just add the akismet tags to your contact forms like akismet:author and akismet:author_email and you are spam free.
 
Last edited:
Upvote 0
Upvote 0
fisicx said:
Except it isn't free: Akismet
Click to expand...

So that people are not put off using Akismet, I just want to make the point that it is free for non-commercial use. I am aware that this is a business forum, however those that run a blog or small website could still qualify for the free plan.
 
Upvote 0
Hi

I had this last week after sending out some newsletters and emails to my audience. I asked my technical team. they responded.
They added a second level Captcha form on the comments area by users -
This worked immediately. Last weekend I had 1340 comments, this weekend I had 1!!
Thanks to my technical team.
 
Upvote 0
A Party Shop said:
Our Party Blog is built with Wordpress.

We seem to have eradicated comment spam but every time we make a new blog post, a wave of spam then arrives via our contact form.

I know it's from the contact form as it says [your-subject] and at the bottom of the email "This mail is sent via contact form on A Party Shop Blog http://www.apartyshop.co.uk/blog"

Any suggestions on how we can rid this PITA?
Click to expand...

Definitely set a question that humans can answer that bots will find tricky. This can be done quite easily adding fields. Recaptcha is useful but I think Q&A is the best way forward.
 
Upvote 0
amac said:
Definitely set a question that humans can answer that bots will find tricky. This can be done quite easily adding fields. Recaptcha is useful but I think Q&A is the best way forward.
Click to expand...

Just use akismet as it removes the need for more fields which is either a potential area the form fails or causes someone to leave.

Also unrelated but I just read your homepage:

"Founded in May 2013, MacGregor Industries is synonymous with industrial expertise and financial strength. The company drives operational improvement, strategy, financing, and restructuring – and executes industrial transactions.

As an active owner, MacGregor Industries is a powerhouse in the development of strong companies – with an ultimate goal of creating value for shareholders, customers, employees, and society in general."

LOL. Find a new copywriter.
 
Upvote 0
Questions generally work better than image based captchas to eradicate spam emails, (eg is the sun hot or cold?) Image based captchas can be bypassed with captcha bypass services that are integrated into the tools that these email form spammers use.

Having said that there seems to be a new generation of captcha out now where the user has to move pieces around to complete an image, a bit like doing a jigsaw. These are likely to be very effective at keeping spammers out. Also do a google search for "qaptcha" this looks like a very user friendly way to eliminate spam bots. The user has to unlock the form before they can submit it by sliding a button in the same way you unlock an Iphone.
 
Upvote 0
Basi Heating said:
Image based captchas can be bypassed with captcha bypass services that are integrated into the tools that these email form spammers use.
Click to expand...

Agreed. Unfortunately, as time passes, people find a way to bypass these standard security procedures.

Yes, questions work, but I also like the new captcha service where you have to drag and drop images- a nice touch.
 
Upvote 0
By no means an IT expert but I've used the Honeypot plug in the past and it works well.
 
Upvote 0
iksol said:
You need to use a CAPTCHA.
Click to expand...

Nooooo. CAPTCHA is a horrible user experience, and it isn't spam-bot proof in-fact most have been broken.

fisicx said:
Askimet won't block contact form spam, it's for blog comment only.
Click to expand...

I am afraid it does and works very effectively, you can use it with contact form 7, grunion contact form, and JetPack contact form (which is grunion).


Faevilangel said:
There are addon's for CF7 etc which makes Akismet work
Click to expand...

You don't need an add on for contact form 7, it is built in and a simple box tick (full syntax here http://contactform7.com/spam-filtering-with-akismet/ )


As you can tell we are fans of Akismet, so much so we pay for an enterprise licence and give it away to our fully managed WordPress clients.
 
Last edited:
  • Like
Reactions: fisicx
Upvote 0
llocally said:
I am afraid it does and works very effectively, you can use it with contact form 7, grunion contact form, and JetPack contact form (which is grunion).
Click to expand...
I know this now and am suitably humbled.

I'm looking at askiment integration with my contact form plugin - it's not easy.

But I agree, avoid captcha where ever possible. It's got so that I and many people I know don't even bother with websites that use them. Same as those that force me to agree to their use of cookies.
 
Last edited:
Upvote 0
fisicx said:
I'm looking at askiment integration with my contact form plugin - it's not easy.
Click to expand...

Using the API is hard, but if the akismet plugin is installed and on, then most of the work is done.

Download the 'grunion contact form' (as used in JetPack by Automattic, the same developers as Akismet), and have a search the code for akismet, you will see that is isn't too hard (for an expert developer).
 
Upvote 0
Upvote 0
Upvote 0
llocally said:
It does
Click to expand...

I agree it does. But it's not filtering the form, it converts the form inputs to comment fields and then uses the Akismet database. There is a whole bunch of code built into the forms to make this work. I know, I've just spent most of the day trying to unravel Grunion end extract the bit that talks to Akismet.
 
Upvote 0
You must log in or register to reply here.

Latest Articles

Top Bottom
Back