Skip to main content
ExpressionEngine® Answers

Return to Question

Tweeted twitter.com/#!/StackExpression/status/479438657422516226
added 137 characters in body
Source Link
Brooke Martin Chao
Brooke Martin Chao
  • 121
  • 5

I am running Expresso Store on the following site: https://peopleplacestraining.org

Everything seems to be working well, except for one thing…we're getting several spambot user registrations a day from the member registration portion of the checkout form. They're not even going through the order process - they're somehow creating members through the backend.

I have Snaptcha enabled on our site, but because the form used by Expresso Store is not the kind of form Snaptcha seems to recognize, it doesn't work. IIt just gives the error message even though I'm testing the form as a legitimate user, and have verified that Javascript is enabled.

Next, I tried adding two hidden fields and using PHP to render an error message and a blank page (instead of the order confirmation screen) if those two fields are populated, but I couldn't get it to render the page correctly (it was either totally blank or showed both the error message AND the order confirmation page).

Can someone please explain to me how I'm supposed to prevent Spambots from registering as members on my site using your product? Shouldn't this be a little more secure?

I am running Expresso Store on the following site: https://peopleplacestraining.org

Everything seems to be working well, except for one thing…we're getting several spambot user registrations a day from the member registration portion of the checkout form. They're not even going through the order process - they're somehow creating members through the backend.

I have Snaptcha enabled on our site, but because the form used by Expresso Store is not the kind of form Snaptcha seems to recognize, it doesn't work. I even tried adding two hidden fields and using PHP to render an error message and a blank page (instead of the order confirmation screen) if those two fields are populated, but I couldn't get it to render the page correctly (it was either totally blank or showed both the error message AND the order confirmation page).

Can someone please explain to me how I'm supposed to prevent Spambots from registering as members on my site using your product? Shouldn't this be a little more secure?

I am running Expresso Store on the following site: https://peopleplacestraining.org

Everything seems to be working well, except for one thing…we're getting several spambot user registrations a day from the member registration portion of the checkout form. They're not even going through the order process - they're somehow creating members through the backend.

I have Snaptcha enabled on our site, but because the form used by Expresso Store is not the kind of form Snaptcha seems to recognize, it doesn't work. It just gives the error message even though I'm testing the form as a legitimate user, and have verified that Javascript is enabled.

Next, I tried adding two hidden fields and using PHP to render an error message and a blank page (instead of the order confirmation screen) if those two fields are populated, but I couldn't get it to render the page correctly (it was either totally blank or showed both the error message AND the order confirmation page).

Can someone please explain to me how I'm supposed to prevent Spambots from registering as members on my site using your product? Shouldn't this be a little more secure?

Source Link
Brooke Martin Chao
Brooke Martin Chao
  • 121
  • 5

Spam Bot Member Registrations in ExpressoStore

I am running Expresso Store on the following site: https://peopleplacestraining.org

Everything seems to be working well, except for one thing…we're getting several spambot user registrations a day from the member registration portion of the checkout form. They're not even going through the order process - they're somehow creating members through the backend.

I have Snaptcha enabled on our site, but because the form used by Expresso Store is not the kind of form Snaptcha seems to recognize, it doesn't work. I even tried adding two hidden fields and using PHP to render an error message and a blank page (instead of the order confirmation screen) if those two fields are populated, but I couldn't get it to render the page correctly (it was either totally blank or showed both the error message AND the order confirmation page).

Can someone please explain to me how I'm supposed to prevent Spambots from registering as members on my site using your product? Shouldn't this be a little more secure?