Honeypot and Autocomplete

  • Resolved o2xav

    (@o2xav)


    6 months, 2 weeks ago

    Hi, thanks for your efforts and for this excellent plugin.
    I get a lot of false positive on a specific website riddled with spam (approx 3 spams / hour) from spambots.
    I was wondering if the visitor’s browser autocomplete feature could accidently fill a hidden (honeypot) field?
    I have latest version of cf7 antispam, cf7 and flamingo.
    No JS errors in the browser’s console.

    • This topic was modified 6 months, 2 weeks ago by o2xav.
    • This topic was modified 6 months, 2 weeks ago by o2xav.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Erik

    (@codekraft)

    6 months, 2 weeks ago

    Hi @o2xav,

    Thanks for reaching out and for the kind words about the plugin!

    That’s a great question. In theory, this shouldn’t happen. To be honest, I have a some websites where the plugin is installed and I haven’t seen this issue. The plugin actually disables the browser’s autocomplete feature on the honeypot field by setting an invalid value for the autocomplete attribute. Specifically, it creates an input with autocomplete="fill". I have some quick questions for you: is this happening with all of emails submitted, or just a few ones? Would you be able to copy and paste the user agent from one of the submissions where the honeypot field was accidentally filled? Are you using any other plugins that modify forms (including CRM plugins)?

    Thanks for bringing this to my attention! I’m currently working on the next version of the plugin, where I’ve rewritten some parts, including the honeypots. If you’re comfortable with testing a beta, you can download the 0.6.5-beta1 version from my GitHub. I’m currently testing it on a couple of my own sites and haven’t had any issues so far. Just make sure you know what you’re doing, since it’s a pre-release version.

    Erik

    Thread Starter o2xav

    (@o2xav)

    6 months, 2 weeks ago

    Thank you for your answer, and taking this matter into consideration.

    It seems that for 48h, there are no more false positives, I took some time 48h ago to locate false positives and set them as “not spam”, maybe this has fixed the issue.

    If I ever have the issue again, I will re-open this thread and come back with all the info I can gather.

    Thanks again !

    Plugin Author Erik

    (@codekraft)

    6 months, 2 weeks ago

    You’re welcome! Sounds good, please do let me know if it happens again. Thanks for the heads-up!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Honeypot and Autocomplete’ is closed to new replies.