Hi @mediafishcanarias
Hope this message finds you well, and thanks for sharing your form.
After a couple of tests on different sites, the reCaptcha badge is showing without any issues.
While reCAPTCHA and other spam-blocking tools are valuable in deterring automated spam bots and malicious activities, it is essential to acknowledge that they may not be foolproof in blocking all forms of spam. Spammers are constantly evolving their tactics and finding new ways to circumvent security measures, which can sometimes pose a challenge even with robust protection in place.
In such cases, there are other recommendations you can take to avoid Spammers:
These are all our Forminator security features, Akismet would be a good option:
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#security
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#cleantalk-anti-spam
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#friendly-captcha
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#simple-cloudflare-turnstile
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#enable-akismet-spam-protection
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#enable-honeypot-protection
In addition, using Cloudflare as an extra security layer for your domain would help too, since their basic (free) plan does have a bot fighter mode.
My colleague asks you for the SPAM submission to see if we can find a patron, for example, submissions using the same domain for the email address, in such cases, we have this snippet that will prevent submissions that contains such emails:
<?php
add_action( 'wp_footer', function() {
if ( ! is_singular() || ! has_shortcode( get_the_content(), 'forminator_form' ) ) {
return;
}
?>
<script type="text/javascript">
(($,d)=>{
if ( window.wpmudev_forminator_validarte_email_field ) {
return;
}
window.wpmudev_forminator_validarte_email_field = {
run: function() {
let field_id = 'email-1',
forbitten_public_emails = [ 'gmail', 'yahoo' ],
form = $( 'form.forminator-custom-form' ),
email_field = form.find( <code>#${field_id} input</code> ),
field_parent = email_field.closest( '.forminator-field' ),
error_markup = '<span class="forminator-error-message" aria-hidden="true"></span>',
error_msg = 'Please avoid using gmail, yahoo etc and use a private email instead',
error_field = field_parent.find( '.forminator-error-message' ); //$( '<span />', { 'class' : 'forminator-error-message' } );
if ( 0 ===error_field.length ) {
error_field = $( error_markup );
}
$(d).on( 'validation:focusout', function(){
let value = email_field.val();
for ( let key in forbitten_public_emails ) {
if( forbitten_public_emails.hasOwnProperty( key ) ) {
if ( value.includes( <code>@${forbitten_public_emails[key]}</code> ) ) {
field_parent.addClass( 'forminator-has_error' );
error_field.html( error_msg );
$( error_field ).insertAfter( email_field );
break;
}
}
}
} );
}
};
$(d).ready( function(){
$(d).on( 'after.load.forminator',function( e, form_id ) {
wpmudev_forminator_validarte_email_field.run();
});
} );
})(jQuery,document);
</script>
<?php
}, 40 );
You might need to customize these lines:
Replace email-1 with your form email field.
field_id = 'email-1',
Replace gmail, yahoo, with the spam emails you can track
forbitten_public_emails = [ 'gmail', 'yahoo' ],
Replace the error message Please avoid using gmail, yahoo etc and use a private email instead
error_msg = 'Please avoid using gmail, yahoo etc and use a private email instead',
You might need to install it as a mu-plugin following the instructions on this link https://wpmudev.com/docs/using-wordpress/installing-wordpress-plugins/#installing-mu-plugins.
Let us know if you require additional information.
Best regards,
Laura
