Hey @arnbo and @erwordpresser,
We’re sorry to hear that you’ve encountered spam issues.
If you’re still having spam with reCAPTCHA enabled, you can consider increasing the security level of the reCAPTCHA integration on your site.
For v2 reCAPTCHA, you can do this by going to your reCAPTCHA account. Then in the settings of your current integration, you can adjust the Security Preference slider.
For v3 reCAPTCHA, you can adjust the settings in your WordPress admin area by going to WPForms > Settings > reCAPTCHA. In this Score Threshold field, you can increase the score to a higher number for stricter security.
And if you’d prefer not to use reCAPTCHA, we have another anti-spam protection feature, hCaptcha. This is a good option if you’d prefer not to sign up for Google’s reCAPTCHA service. Within your forms, hCaptcha will display a checkbox asking users to prove they’re human (much like Google’s v2 Checkbox reCAPTCHA). We have a detailed guide for setting up hCaptcha.
Alternatively, you can consider the third-party plugins such as WordPress Zero Spam or Spam protection, AntiSpam, FireWall by CleanTalk which work out of the box to protect your forms against spam.
Further, The {url_referer} Smart Tag obtains its value from a PHP variable $_SERVER[‘HTTP_REFERER’], however, this variable can’t be considered to be infallible, as there are a number of things that can affect it, and it is considered to be an often modified data value.
Could I ask for some details about your intended use case here? Perhaps I might be able to provide some other suggestions that could work more reliably which is suitable for your purposes. In case it helps, this guide might help.
Hope this helps!
