WebSite X5Help Center

 
Joe G.
Joe G.
User

Google recaptcha working on contact forms, but not on blog comments  en

Autor: Joe G.
Visited 893, Followers 1, Udostępniony 0  

After a massive DOS cyber attack today on my contact forms and blog comments, I switched from using Website X5 CAPTCHA to Google reCAPTCHA v2. Previously website X5 CAPTCHA was shown on both contact forms and blog comments. Google reCAPTCHA v2 is now shown on conatct forms, but not on blog comments leaving them with NO anti-spam protection at all. The Google reCAPTCHA v2 Wiget is actually shown on the blog comments preview, but not on the website after uploading. I really need to fix this before the next cyber attack!

I have:

  1. Selected Google reCAPTCHA v2 on the Settings|Privacy and Security|Security|Captcha type.
  2. Selected Enable 'Captcha' anti-spam filter on Page Creation|<page>|Contact Form Object|Send tab
  3. Selected Enable 'Captcha' anti-spam filter on Sitemap Creation|<page>|Blog: Article Page|Comments tab

I am running EVO 2022.3.5

Posted on the
2 ODPOWIEDZI - 1 POMOCNY - 1 PRAWIDłOWA ODPOWIEDź
Esahc ..
Esahc ..
Moderator

Joe, can you provide a link to your page (& have you flushed the browser cache with CTRL+F5)

Czytaj więcej
Posted on the from Esahc ..
Joe G.
Joe G.
User
Autor

Hi Esahc,

I flushed the cache and it worked, just as you said!

Thank you for your correct response.

I was very surprised that placement of the Google reCAPTCHA v2 widget would itself be the subject of caching!

I learn something new every day.

The take-home message from this terrible experience is that the Website X5 CAPTCHA anti-spam filter is not very strong. Although I update my website daily, and I see it uploading new CAPTCHA images each time, it took the attacker only a few tries, the other day, to get their scripts working on one form, duplicate it for several other forms and blogs, and to then to generate 1000s of attacks. I had to shut down the offending pages and mailboxes and clear out as many spam emails and blog posts as I could. It took me all day.

It makes you wonder why anyone would bother to attack a free website, with no offending content.

Anyway, problem solved. Thank you.

Regards,

Joe.

Czytaj więcej
Posted on the from Joe G.