Post by Loady » Sun Jul 04, 2021 11:16 pm

I have caoture enabled but still get the odd fake account getting through, this was only one or two every few days and i would just delete them, this weekend i have had over 30..is there something wrong ?

Active Member

Posts

Joined
Sun Oct 07, 2018 10:47 pm
Location - UK

Post by straightlight » Mon Jul 05, 2021 2:28 am

Loady wrote:
Sun Jul 04, 2021 11:16 pm
I have caoture enabled but still get the odd fake account getting through, this was only one or two every few days and i would just delete them, this weekend i have had over 30..is there something wrong ?
OC version. Captcha has not been compromised. You simply need an extension from the Marketplace to use an up-to-date version of Captcha.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Loady » Mon Jul 05, 2021 6:20 am

Is that a free extension?

Active Member

Posts

Joined
Sun Oct 07, 2018 10:47 pm
Location - UK

Post by straightlight » Mon Jul 05, 2021 4:48 pm

Free / Paid Captcha has nothing to do with being compromised or not. Since you're asking if there are free extensions, then you are simply looking for a free extension.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

User avatar
Legendary Member
Online

Posts

Joined
Mon Aug 22, 2011 11:01 pm
Location - London Gatwick, United Kingdom

Post by JNeuhoff » Mon Jul 05, 2021 11:11 pm

You can try our SpamBot Buster (not a free extension though) which doesn't need a captcha at all. We haven't had fake account registrations or spambot messages for over a year now on our live sites.

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig


User avatar
Guru Member
Online

Posts

Joined
Wed Dec 05, 2007 3:38 am


Post by fredJ » Wed Jul 07, 2021 6:15 pm

I also got a lot of spam despite captcha, there is a bot that is good at cracking captchas.

Eventually I just hardcoded my own spam protection by adding a field in the contact page that asks a question that needs to be answered with the letters APA. So far no spam.
First I tried to have users answer the question "what is 4+5" but the bot had no problem cracking it. It needs to be something trickier.

Also, I removed the possibility of creating an account on the separate page. They have to create the account when they make an order.
I had some bot creating 300+ accounts, with my server sending out an email for each time, and then we got blacklisted by spam-assistants.
So I advice you to check your page of registered users, order by creation date, and see if there is a lot of spam accounts.

New member

Posts

Joined
Fri Jan 18, 2019 11:10 pm

Post by JNeuhoff » Wed Jul 07, 2021 6:21 pm

fredJ wrote:
Wed Jul 07, 2021 6:15 pm
I also got a lot of spam despite captcha, there is a bot that is good at cracking captchas.
Agree, most captchas are pretty useless these days because spambots tend to overcome them too easily.

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig


User avatar
Guru Member
Online

Posts

Joined
Wed Dec 05, 2007 3:38 am


Post by PhantomMenace » Thu Jul 08, 2021 7:08 pm

Yea getting alot of bots registering dummy accounts, i tried using both google catpcha and the default opencart one without any changes,

New member

Posts

Joined
Wed Dec 30, 2015 6:03 am

Post by straightlight » Thu Jul 08, 2021 7:53 pm

PhantomMenace wrote:
Thu Jul 08, 2021 7:08 pm
Yea getting alot of bots registering dummy accounts, i tried using both google catpcha and the default opencart one without any changes,
You may then want to consider to find a CSRF protection form extension.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Dutch Pride Code » Thu Jul 08, 2021 8:50 pm

I've been using Google reCAPTCHA on OC 3.0.3.2 and never had any fake accounts ever since. If I remember right the extension exists by default and you can add it to all default forms, or using a (paid) Form Builder extension to your custom forms. You only need to register at Google to get both a site key and and a secret key, which you will enter on the extension page: Extensions > Captcha > Google reCAPTCHA

If the captcha does not function it could be due to some modification.
Have you tried turning off any modifications one by one to see if captcha then works?

User avatar
Active Member

Posts

Joined
Sun Jan 26, 2020 9:46 pm

Post by PhantomMenace » Tue Jul 13, 2021 8:22 pm

Just noticed on my website that even tough i have the google re-captcha enabled and linked,

Im able to register accounts and send contact forms witout checking the checkbox?

When i use the basic opencart captcha it doesnt let me do that, it actually prompts to enter the catpcha,

New member

Posts

Joined
Wed Dec 30, 2015 6:03 am

Post by straightlight » Tue Jul 13, 2021 9:09 pm

PhantomMenace wrote:
Tue Jul 13, 2021 8:22 pm
Just noticed on my website that even tough i have the google re-captcha enabled and linked,

Im able to register accounts and send contact forms witout checking the checkbox?

When i use the basic opencart captcha it doesnt let me do that, it actually prompts to enter the catpcha,
Known issue. Use one from the Marketplace instead of the core.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by PhantomMenace » Tue Jul 13, 2021 11:13 pm

straightlight wrote:
Tue Jul 13, 2021 9:09 pm
PhantomMenace wrote:
Tue Jul 13, 2021 8:22 pm
Just noticed on my website that even tough i have the google re-captcha enabled and linked,

Im able to register accounts and send contact forms witout checking the checkbox?

When i use the basic opencart captcha it doesnt let me do that, it actually prompts to enter the catpcha,
Known issue. Use one from the Marketplace instead of the core.
Yea that fixed it thanks

New member

Posts

Joined
Wed Dec 30, 2015 6:03 am

Post by straightlight » Wed Jul 14, 2021 12:02 am

PhantomMenace wrote:
Tue Jul 13, 2021 11:13 pm
straightlight wrote:
Tue Jul 13, 2021 9:09 pm
PhantomMenace wrote:
Tue Jul 13, 2021 8:22 pm
Just noticed on my website that even tough i have the google re-captcha enabled and linked,

Im able to register accounts and send contact forms witout checking the checkbox?

When i use the basic opencart captcha it doesnt let me do that, it actually prompts to enter the catpcha,
Known issue. Use one from the Marketplace instead of the core.
Yea that fixed it thanks
Great. Now that the issue has been solved, please add: [SOLVED] at the beginning of the subject line on your first post.

Dedication and passion goes to those who are able to push and merge a project.

Regards,
Straightlight
Programmer / Opencart Tester


Legendary Member

Posts

Joined
Mon Nov 14, 2011 11:38 pm
Location - Canada, ON

Post by Loady » Tue Jul 20, 2021 5:19 am

well i am yet to filter through the suggestions given here. With thanks

Active Member

Posts

Joined
Sun Oct 07, 2018 10:47 pm
Location - UK
Who is online

Users browsing this forum: Semrush [Bot] and 74 guests