Hi @oreroy
Could you please try the following?
Add a hidden field, select user IP.
https://wpmudev.com/docs/wpmu-dev-plugins/forminator/#hidden-field
When you receive the new submission check this IP on Google or let us know the IP so we can verify if it is any reported spam IP on any site.
I also pinged our developers to verify the case and see how this could be happening.
I would suggest following my suggestions to prevent the issue as those are the best approach to add an extra security layer, but if you would like to keep this numeric field an alternative is this custom validation:
<?php
add_filter('forminator_custom_form_submit_errors', 'verification_for_number_field_extra_layer', 10, 3);
function verification_for_number_field_extra_layer($submit_errors, $form_id, $field_data_array) {
$forms = ['4777', '1020'];
$field = 'number-1';
// Skip if is not the correct form
if( !in_array( $form_id, $forms ) ){
return;
}
$number = (int) $_POST[$field];
// double verification for number field
if( $number !== 14 ) {
$submit_errors[][ $field ] = __( 'Please, enter the correct number' );
}
// Always return $submit_errors
return $submit_errors;
}
You can add the code as a mu-plugin following this guide:
https://wpmudev.com/docs/using-wordpress/installing-wordpress-plugins/#installing-mu-plugins
Add your form ID in the:
$forms = ['4777', '1020'];
This will convert to a number in PHP level and verify if the field is 14.
Best Regards
Patrick Freitas