Form submits without reCAPTCHA box being checked

  • Resolved BRANDgfx

    (@brandgfx)


    1 year, 5 months ago

    I’m having trouble getting the reCAPTCHA working on my form. Specifically, the form is allowing people to sign up for our newsletter without checking the reCAPTCHA checkbox.

    I spoke with Constant Contact support first. Here are their notes:

    “The Constant Contact Forms for WordPress plugin on their website has been allowing people to sign up without checking the ReCAPTCHA checkbox. Our knowledgebase article “Add Google reCAPTCHA to your WordPress sign-up form to prevent spam entries” states the form can’t be submitted until the box is checked.

    The checkbox on this website is visible and does not require any action. I have replicated the issue on their site, https://rowling.com/newsletter-signup, in Chrome and Chrome Incognito.

    A success message appears, and contact is added to Constant Contact. The Constant Contact Forms for WordPress plugin is updated to the latest version. Denise has had this issue for some time and had hoped that adding the site and secret key would resolve it. The form looked this way (ReCAPTCHA checkbox visible but not required) long before they entered the site and secret key.”

    And here is the verbiage from the Tier 3 agent who looked at it as well:

    “I spoke with our developers and did some testing with our WordPress test site, and it definitely requires the ReCAPTCHA checkbox to be checked before you can submit the form, when using the latest version of WordPress. What you passed on from Denise about a ReCAPTCHA checkbox being there before they added the keys should not even be possible. I expect there’s something wrong with their ReCAPTCHA keys and I would strongly suggest they double-check it in their Google account, and remove and re-add the keys once they determine the issue, and/or create and add a new set of keys altogether.”

    BUT – I (Denise) have already tried new keys. Plus, the “sitewide” reCAPTCHA (in the ≤ HEAD ≥ code) is integrated and working fine. All this to say, I am certain it’s not an API Keys issue, as the problem was there before and after adding new keys. Additionally, *even without the reCAPTCHA keys entered* the box displays – there’s no way to not display the box.

    WordPress and plugin are both updated to most current versions. Please advise. Thanks!

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author Constant Contact

    (@constantcontact)

    Hi @brandgfx

    To confirm, you’re using “Version 2” for your chosen reCAPTCHA settings with our forms plugin, correct?

    I’m also seeing the reCAPTCHA logo in the lower right corner of the website, so I’m wondering if you have a different plugin that’s also using reCAPTCHA but version 3. I could see this possibly interfering with each other.

    It also has me wondering if the reCAPTCHA responses are being included at all with the form submission, because there should be a response of “Failed reCAPTCHA check” if we were able to check, but not validate.

    Trying with other forms using reCAPTCHA’s settings to temporarily disabled would be the first and easiest test for this, but we can attempt to dig in a bit more if willing and able.

    Thread Starter BRANDgfx

    (@brandgfx)

    Hi. No, we’re using the latest and greatest v3 reCAPTCHA. Does it need to be v2 instead?

    RE: the sidewide reCAPTCHA as you mentioned shown in lower right corner, that isn’t from a plugin. It’s code (provided by Google reCAPTCHA) that is entered in the ≤HEAD≥ code for the site. Yes, that too is v3.

    I am definitely willing and able, however I might need to pass you on to my actual developer if it gets too complex.

    How should we proceed?

    • This reply was modified 1 year, 5 months ago by BRANDgfx.
    Plugin Author Constant Contact

    (@constantcontact)

    Hi again,

    The checkbox version and potential “choose every image with a car in it” popups would be version 2 of the reCAPTCHA library. So either you have version 2 chosen already, or you have version 3 chosen and somehow things are still rendering anyway, which will be a new one for me.

    If you’re not sure how to remove the <head> code for the manual version 3 integration, you may need to have them handle that part. Since that’s the only other integration right now, that’d be what needs temporarily removed to test the rest of the form submission.

    You’ll be able to visually confirm what version our Forms plugin is using, by visiting this page

    Thread Starter BRANDgfx

    (@brandgfx)

    Hi again, and thanks for your helping with this.

    First off, I did confirm and as I stated earlier – the form plug-in’s spam control version was/is definitely using v3. Which is the version that the new keys were created as.

    I removed the keys from the plugin settings completely, and the form still shows the reCAPTCHA checkbox below the form. (I have left them empty for now.)

    I then removed the Google script from the HEAD. Oddly enough – that’s when the reCAPTCHA checkbox below the form went away!

    BUT – the overall sitewide reCAPTCHA did NOT go away. Which means, the code for that is not actually in the HEAD. Or at least I can’t find it in there. So I don’t know how/where to remove that sitewide reCAPTCHA. I’m thinking it’s in my client’s reCAPTCHA settings with Google… Which means I’d need to have them log in to their Google account and manage that directly (since I don’t have that access.)

    Before I get them involved, is there anything else you can suggest or think might be going on that I could try?

    What “should” I be seeing under the form if I’m using v3 and things are working properly?

    Plugin Author Constant Contact

    (@constantcontact)

    What “should” I be seeing under the form if I’m using v3 and things are working properly?

    Nothing for a reCAPTCHA setup. You would/should be seeing the little reCAPTCHA circle graphic in the lower right corner again though. Version 3 is meant to be the “invisible” aka all behind the scenes version with no human intervention needed. Google “just knows” in its magic Google-ly ways.

    Thread Starter BRANDgfx

    (@brandgfx)

    Thank you!

    It seems we had a conflict in an older plugin for Contact Form 7 which had recaptcha integration there. Even though disabled, it was still causing a problem. When I deleted that integration, the main site-wide integration (bottom right corner) went away. After adding the API keys to the Constant Contact Form plugin, it came back. But I still had the checkbox under the form which would submit without needing to being checked.

    I then removed general recaptcha script from our ≤HEAD≥ code. At which point the checkbox under the form went away.

    I guess I was assuming we’d still see something under the form and couldn’t figure out how to make it work.

    If it does it “invisibly” then I think I have it working correctly. I tested and it successfully sent. I just don’t know how to test it to get a “failed recaptcha in order to know it’s actually working… Is there a way to test that?

    Would you be so kind as to test it yourself one more time to verify it’s working properly and let me know?

    Plugin Author Constant Contact

    (@constantcontact)

    Sorry for the delay in response. I’m getting a “Failed reCAPTCHA check” message when submitting, so something isn’t validating for me at the moment.

    Thread Starter BRANDgfx

    (@brandgfx)

    Oh phooey, I was hoping it was just “invisibly” working now.

    I just now tried it myself again – not logged in as admin to WordPress – Firefox 118.0.1 – and got the same failed reCAPTCHA message.

    I then went to Safari V 16.5.2 – still not logged in as admin to WordPress – and <span style=”text-decoration: underline;”>SUCCESSFULLY</span> sent the form – using the SAME email address: [email protected] (Also got a confirmation email from Constant Contact to verify my new subscription.)

    I’m using MAC OS Ventura 13.4.1

    So is it maybe a browser issue? Or stricter protocols with Firefox? Or…???

    What do you suggest we try next?

    Plugin Author Constant Contact

    (@constantcontact)

    I wonder if we were giving just enough behavior to have it think we were potentially spammers. I know I tried once just a moment ago and it failed, but then afterwards I just let it sit and then refreshed and tried again and got a success message.

    Best thing would probably be have someone else test it out and see if they get the same success.

    Plugin Author Constant Contact

    (@constantcontact)

    Have things calmed down on this front @brandgfx ?

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Form submits without reCAPTCHA box being checked’ is closed to new replies.

Tags