Spam with Recaptcha V3 (site does not check recaptcha tokens)

  • Resolved TGM WEB GURU

    (@tgmwebguru)


    3 years, 4 months ago

    hello i am using your plugin on my site. I have a problem with recaptcha v3, which obviously does not work and I receive a lot of spam. it didn’t happen before, it started happening a few days ago. everything was fine before. I didn’t update the plugin before that, didn’t update the WordPress, didn’t update the theme or other plugins and this problem appeared out of nowhere. I am using integration with recaptcha version 3 and in the google recaptcha panel I see a message stating that my site does not check recaptcha tokens. This information does not tell me anything, I installed your plugin and configured the recaptcha according to your instructions. why my site suddenly stopped checking tokens I have no idea. please tell me what could be the problem. I updated the plugin to the latest version yesterday, it didn’t help – today in half a day I received 3 spam messages from the form.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Takayuki Miyoshi

    (@takayukister)

    Where can we see the website in question?

    Thread Starter TGM WEB GURU

    (@tgmwebguru)

    dr-zhuykov.ru/kontakti/

    Plugin Author Takayuki Miyoshi

    (@takayukister)

    Where on the site do you have the form having the issue?

    Thread Starter TGM WEB GURU

    (@tgmwebguru)

    Didn’t pay attention to this before, thanks for asking. In absolutely all cases, this is the main page. It started on October 5, until that day there was not a single letter out of this form for more than 2 years. If it matters – i have 1 and only contact form on my site.

    Thread Starter TGM WEB GURU

    (@tgmwebguru)

    And I also noticed that in the form on the main page, the sender’s name is not marked as a required field. And on other forms it is marked as mandatory. It looks like this form was created with wpbakery and not with your plugin and is where the problem lies.

    Thread Starter TGM WEB GURU

    (@tgmwebguru)

    The question is closed. The problem was in the default “contact form” used in wpbakery. This form is almost no different from the “contact form 7” that is built through the plugin. And it confused me. This default form does not use recaptcha and is not configurable at all, this form sends any message at all, even if each field contains 1 character. What spammers used perfectly. Today I see their visits, these are direct visits under Linux, but they cannot send the form, cuz I changed the default form from wpbakery to contact form 7. So your form still works well with Recaptcha V3 and spam is blocked very well. Thank you for guiding me to the correct solution. Good luck.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Spam with Recaptcha V3 (site does not check recaptcha tokens)’ is closed to new replies.

Tags