For added security, as well as the captcha, I would still like to keep the Honeypot on the form – is this a bug or intended behaviour?
]]>Any ideas?
]]>I know that the Pro version has the Google reCaptcha option but is there a working honey pot option instead? I noticed within the code that there is mention of it but the large amount of spam indicates that it is either not set up or is failing miserably. Yes we have the security question (2 digit option) included but it seems the bots are getting around all of these.
I don’t really like the Google reCaptcha option because it will frustrate good valid users so I’m hoping you have a really good honey pot solution so users don’t get frustrated. Maybe the honey pot option could be added to the “Form Items” so users can choose where to add it within the overall form which may help in combating bots.
Let me know either way so I can make an educated decision on how to move forward.
]]>Do you have any plans to replace the CAPTCHA function on YOP Poll with reCAPTCHA, Invisible reCAPTCHA, or a honeypot system?
The current CAPTCHA is difficult to read and as a result, leads to a lot fewer votes.
Plus, apart from anything, it looks so old-fashioned now.
Thanks
]]>I noticed I was being attacked by bots on various URLs for the file setup-config.php so I set up a honey trap using the “Immediately Block URL” in Wordfence Options.
As far as I can tell from reading WordPress Codex, setup-config.php is only used for new WordPress installs, it’s thus what I’d call vestigial (and incidentally is an example of another aspect of WordPress that unnecessarily attracts bots and uses up bandwidth.)
Setup-config.php exists in most WordPress installs as /wp-admin/setup-config.php, so for the most effective honey trap FTP into your WordPress install /wp-admin/ folder and rename the pesky bot attractor to something like /wp-admin/setup-config-renamed0986789.php then add the following to your Wordfence “Immediately Block URLs” and watch the fun via your Wordfence “Blocked” list. (The attacks I’m getting include URLs with more folders-directories than just one, so following has up to three steps to catch all the attacks).
/*/setup-config.php
/*/*/setup-config.php
/*/*/*/setup-config.php
Remember that due to the way Wordfence works, if a URL for a file exists the “Block URL” won’t function. Hence, the renaming of setup-config.php.
]]>https://www.ads-software.com/plugins/ap-honeypot/
]]>https://www.ads-software.com/plugins/salesforce-wordpress-to-lead/
]]>