Most entries going to spam
-
Doesn’t look like my post made it here, so posting again. Using v 1.7.2 and most entries are now going to spam since the last update. Hosting is on a dedicated server, not WP Engine. Same issue as the other user that posted, regarding tokens.
-
@plaine, thank you for the extra data point. Are you using any caching plugins or solutions? Also, have you tried the latest build that I shared in other threads?
I have not tried the newest build, but i did revert back to v1.6 based on your recent post. I can’t take the risk, so I’ll await a fix before upgrading to the latest again. This morning 6 out of 6 had gone to spam so far. And no, not using any other caching plugins. I did, however, find some residual W3TC Total Cache entries in my htaccess. I didn’t have the plugin installed, however. So I removed that from the htaccess just now.
Was this fixed yet? We have Version 1.7.3 and 9 out of 10 legitimate entries are still going to spam!
Not to my knowledge. I reverted back to 1.6 and am actually in the process of just switching to something else entirely.
@lookwhoo, version 1.7.3 included a number of fixes aimed at resolving this issue, and this is the first report we’ve had of it still occurring since that release.
Please reach out to support@gravitykit.com and we’ll be happy to take a closer look at your site to see what may be causing it there.
We are using WP Fastest Cache. Do we still need to exclude the pages the forms are on?
@lookwhoo, it’s hard to say for sure without knowing more about your setup, but excluding the form page from cache would be worth trying. In a quick test on my end, I rolled the clock back 10 days, configured WP Fastest Cache, submitted a couple of entries, then restored the clock and submitted more. None of the entries went to spam. I used these settings: https://i.gravitykit.com/i/Wg8kNn
That said, I realize this isn’t the best possible way to test. Since we haven’t been able to reproduce the issue on any of our own sites, we’d really appreciate any help investigating this on a live site where it’s happening.
@mrcasual Thanks for the reply and update. The strange thing is, I only had this happen on one particular site. The other sites we have this installed on have the cache setup as well but we’re not finding the entries going to spam and those do have pages excluded. It’s only happening on one of our sites where the pages were not excluded (even though it used to work before recent updates.)
I’m going to chalk this up as a conflict somewhere. I had to temporarily disable the plugin because we get a lot of entries on this site that had the issue and it was impeding our process. We’ll test a bit more off-peak hours and see if there’s any resolve by excluding pages from the cache that have the form. For now, your reply helps ease the concern a bit.
@lookwhoo, just FYI: in 1.7.x, we switched from a static, non-expiring global key that was included on every page to a dynamically generated token that’s unique to the form and that has a configurable expiration (7 days by default).
To work well with page caching, the plugin uses a two-tier approach: when the form is submitted, JavaScript fetches a fresh token from the server via AJAX right before submission. This is the primary path and works regardless of caching, since the token is minted on-demand.
As a safety net, the plugin also embeds a pre-generated fallback token in the page HTML when it’s first rendered. If the AJAX request fails or times out (e.g., due to a firewall rule, security plugin, etc.), the form falls back to this embedded token. Since the fallback token was created at page-render time, it’s only valid for as long as its TTL. If a caching plugin serves a stale version of the page beyond that window, the embedded token will have expired… and if the AJAX fetch is also failing, the entry gets flagged as spam.
Hi I am using 1.8 and pretty much everything is going into spam including forms using payment and across many website. I am using Defender Pro and on some sites Hummingbird Pro. Is the consensus that caching is causing the issue?
Seems I am going to have to remove the plugin from all the site we are using them on.
@dgrcomms, is your spam prevention token expiration set to 7 days or more under Forms > Settings > Zero Spam? We’d love to take a closer look at your site to better understand what’s happening. Please get in touch with us.
You must be logged in to reply to this topic.