Magento Stack Exchange is a question and answer site for users of the Magento e-Commerce platform. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In my Magento shop, i have a form, witch send the information via email to me, and recently there have ben a lot of spam from that form (70 since yesterday).

Is it posible, to get a secure form in magento, witout using CAPTHA? :)

share|improve this question
    
This answer might be helpful to you. --> magento.stackexchange.com/questions/103808/… – Vishwas Soni Mar 2 at 10:42

I had the same problem and I solved it by installing this extension from the magento-hackaton: https://github.com/magento-hackathon/HoneySpam

This Magento Extension adds a field which is hidden with JavaScript to the Customer Register and the Product Review Form which looks like the URL Field of a Wordpress Comment Form. If this field gets filled and the Form is send, there appears a error message and nothing will be saved.

There is also a check if this form is too fast transmitted, a human normally takes a couple of Seconds or more.

You can enable and disable the functionalities or set the time how long it should take to transmit this forms in the Magento Admin Backend.

Freshly added: Regex-checking on all input-fields to determine a loose index for spam-level. It is not the most accurate thing at all, but it may prevent the low-end spam ("broadband spam"). You also can enable/disable this feature in the backend and set a maximum spam index trust level.

This is how I added it to my form:

On my form .phtml file I added this line:

<?php echo $this->getBlockHtml('contacts.form.fields.before') ?>

This will add the extra field declared in app/design/frontend/polar/valmano/layout/honeyspam.xml:

<default>
    <update handle="honeypot"/>
    <reference name="footer_newsletter">
        <block type="core/text_list" name="contacts.form.fields.before" as="form_fields_before" translate="label">
            <block type="hackathon_honeyspam/honeypot" name="honeyspam.honeypot"
                   template="hackathon/honeyspam/honeypot.phtml"/>
        </block>
    </reference>
</default>

<contacts_index_index>
    <update handle="honeypot"/>
    <reference name="contactForm">
        <block type="core/text_list" name="contacts.form.fields.before" as="form_fields_before" translate="label">
            <block type="hackathon_honeyspam/honeypot" name="honeyspam.honeypot"
                   template="hackathon/honeyspam/honeypot.phtml"/>
        </block>
    </reference>
</contacts_index_index>
share|improve this answer
    
It's a custom form, and i can se that extension is only good for magentomade forms – Patrick Knudsen Mar 2 at 7:41
    
not really, is not a custom form it adds an extra field to the forms you want, so you can use this extension for any form you want. You just need to include the js file there and that is it. – lloiacono Mar 2 at 7:42
4  
I approve of this extension. I used it and it has done wonders. It won't get you 100% spam free, but it does a wonderful job with a minimum effort. – Marius Mar 2 at 7:44
    
my form is on my productpage, how do i include the js files there? its the view.phtml file. – Patrick Knudsen Mar 2 at 7:57
    
got @Marius approval. now you must install extension. – Qaisar Satti Mar 2 at 7:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.