Google reCaptcha not working

Not seeing anything wrong in regards to the implementation here. The “I am human” field is getting rendered. We haven’t updated the plugin over the weekend, so nothing specific there.

Curious if you’ve noticed any fair amount of lag with using the field. I was getting browser lag myself, and I’m wondering if it’s a little widespread and potentially contributing.

I haven’t seen any lag on my end but that’s something I’ll keep a closer eye on now that you mention it. Regarding any changes, both domains are newly registered and it wouldn’t surprise me if the timing of the registrations was more the result of being newly discovered by the bots than what was or was not updated. I did look online to see if there was any increase in recent complaints about bots slipping by reCaptcha and couldn’t find anything.

One thing I know that I’ve read, after seeing reports of reCAPTCHA not being as efficient as hoped, is that it’s at least partially cookie based, which can provide potential issues. Something we’d maybe need to re-evaluate or offer options other than Google’s version.

Slowness, I think is mostly myself and my computer. I was experiencing similar issues for my localhost installs as well. So it’s more me than domain.

That would be good. Email blacklist service integration would probably solve the problem.
Thanks very much for your responses.

Any changes or new developments with this topic, @topix?

I haven’t had any spam for about a week now. Not sure what may have changed – perhaps Google made changes on their end?

Not sure myself, but that’s good to hear that the spam has stopped. I know in 1.3.0 we’re going to be outputting the honeypot spam guard regardless of reCAPTCHA use. Right now it’s only output if there’s not reCAPTCHA keys available. Hoping this proves an extra barrier.

Well, darn. The last couple of weeks the spam registrations have returned.

If you want, I can provide a hotfixed version that re-adds the honeypot, to see if that helps.

@topix any interest in my hotfixed version mentioned previously?

Hi Michael,

Thank you for the response. Yes that would be very helpful, thank you!

This should be the appropriate one: https://www.dropbox.com/s/3p5zxdswtllu7g4/constant-contact-forms-extra-spam-prevention.zip?dl=0

Note that it will extract to a matching directory as the current released one, so it can be uploaded and overwrite the one on the server.

Also note that it won’t have the version number bumped at all.

Any changes on this front for anyone providing feedback?

Closing as we hope the hotfixes have worked, and also we are planning to release 1.3.0 soon, which has those same changes in place.

Released version 1.3.2 with some extra timer-based spam prevention. Hopefully this takes out a lot of lingering spam getting through.