Skip Navigation

[Resolved] Improve spam protection on user forms

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

No supporters are available to work today on Toolset forum. Feel free to create tickets and we will handle it as soon as we are online. Thank you for your understanding.

Sun Mon Tue Wed Thu Fri Sat
- 10:00 – 13:00 10:00 – 13:00 10:00 – 13:00 10:00 – 13:00 10:00 – 13:00 -
- 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 14:00 – 18:00 -

Supporter timezone: Asia/Kolkata (GMT+05:30)

This topic contains 3 replies, has 2 voices.

Last updated by Minesh 2 months, 1 week ago.

Assisted by: Minesh.

Author
Posts
#2682758
ICPKP website spam users.png

We have a user registration form on this site (hidden link) and up until the end of 2023 the form would get the occasional spam submission through it, perhaps 1-5 per week. We added Recaptcha to the form near then end of 2023 but since the beginning of 2024 the number of spam submissions has sky-rocketed, averaging 10-20 per day and all following the same pattern: same first and last name, all options ticked.

I have followed the documentation on adding Recaptcha to user forms and this appears to be set up correctly but for some reason isn't preventing these submissions.

I've attached an image of the Standby Users list where you can see all of the user accounts created by the form. I'm not sure if this helps?

Do you have any other tools we can use to prevent spam submissions, such as a honey pot field or similar?

#2682887

Minesh
Supporter

Languages: English (English )

Timezone: Asia/Kolkata (GMT+05:30)

Hello. Thank you for contacting the Toolset support.

I'm not sure how people can do spam even though the captcha is enabled.

However here is the official Doc that shows how you can protect forms from spam:
- https://toolset.com/course-lesson/protecting-forms-from-spam/

However I see the following "honeypot" plugin that shows that it offers integration with Toolset Forms:
- https://wordpress.org/plugins/honeypot/

#2683313

Thanks for your advice Minesh. I don't know how these spam submissions are getting past the captcha either.

I'll give that Honeypot plugin a shot and see if it has an effect.

#2683325

Minesh
Supporter

Languages: English (English )

Timezone: Asia/Kolkata (GMT+05:30)

Ok great - please update us here how it goes.

This ticket is now closed. If you're a WPML client and need related help, please open a new support ticket.