Salted quiz for spam protection

  • Resolved maria_wp

    (@maria_wp)


    4 years, 9 months ago

    I see that I can create a quiz with some predefined answers. Unfortunatly the result of the answer is already encoded into the value field. Is there a way to add some secret salt which can be configured in the settings page? Some kind of additional option in the configuration.

    This would be great to block spam more easily.

    I have found a similar question:
    https://www.ads-software.com/support/topic/using-quiz-for-spam-protection/

    But seems like not really answered.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Takayuki Miyoshi

    (@takayukister)

    See wp_hash() and learn that it already uses a salt from wp_salt().

    Thread Starter maria_wp

    (@maria_wp)

    Yeah… Seems like it is possible. But how to specify the salt in the answer? I haven’t found a source or documentation how to add it. I can hash a value but this doesn’t mean that the quiz can verify the input.

    Since the code seems public available the decrypt function can easily restore from a value the required answer.

    At least I suffer that problem on my website and therefore ask how to add it or even better how to apply it to an answer?

    Thread Starter maria_wp

    (@maria_wp)

    Wouldn’t it be possible to have the salt configurable?

    With a fixed string like ‘wpcf7_quiz’ it is quite easily to decrypt the content.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Salted quiz for spam protection’ is closed to new replies.