Protecting the Contact Form [#596178]

Does the spam module work for the contact form? I have not seen it mentioned and it does not appear in the list of possible content types in the Spam module's admin section. I suspect that it would not, since it appears to be a special type of node that is not treated as a content type.

For a site that does not have a lot of user-generated content, the contact form is *the* prime target for spam. The Spam module's functionality would be highly useful here.

In case the contact form is not included for Spam check, i like to make it a feature request.

Comments

Comment #1

AltoRetrato CreditAttribution: AltoRetrato commented 29 October 2009 at 10:57

If you (or someone else) is interested in protecting the contact form (and others) from spammers, here's a list of spam-preventing modules.

Comment #2

szczym CreditAttribution: szczym commented 9 November 2009 at 14:44

Title:	Spam module and the contact form	» Protecting the Contact Form
Component:	Miscellaneous	» Code
Category:	support	» feature

The contact form protection is very important imho, for many sites _it is_ the only open spot.

Comment #3

gnassar CreditAttribution: gnassar commented 9 November 2009 at 19:34

Status:

Active

» Closed (fixed)

There is a contributed module to do this already. The D6 version is in development, but working from what I understand.

http://drupal.org/project/gotcha

Comment #4

gnassar CreditAttribution: gnassar commented 9 November 2009 at 19:40

Status:

Closed (fixed)

» Postponed

Though apparently the new version no longer depends on Spam, I'm just now reading. That's a shame -- would've been a great SpamAPI module. I wonder how the spam filtering is being handled there.

Either way, contact form filtering would probably be very good as a contributed module. Right now, I think we're trying to stabilize the 6.x code base with our limited time; I know that my goal is ideally to have the code somewhat cleaned up and most of the big bugs fixed before 7.x is out.

Comment #5

jeyro

English

Chiang Mai

CreditAttribution: jeyro commented 12 November 2009 at 10:35

Respecting the decision to postpone this. For future consideration, this is a usability issue.

Captcha's ask irritating questions, I've seen people having serious difficulties with them, some versions may send content to third party sites, registered, for free or for a fee. If no sound is provided there are critical accessibility and depending on where you are, possibly legal issues. The math captcha and the current version of gotcha appear not to be stopping a good amount of spam, not even on low traffic sites.

The spam module does not visibly interfere with the user when filling a contact form, and it protects well.

To me, it did (still does) not appear as a major innovation to include the core contact form in its protection programme, while all other content and user input types are covered. In other words, why cover everything and leave one glaring hole? This as elaboration on my earlier post.

Comment #6

gnassar CreditAttribution: gnassar commented 2 December 2009 at 22:32

Status:

Postponed

» Active

If you feel like adding spam filtering to the contact form is not a "major innovation," please feel free to submit a contact content module and we'll be happy to add it. :) Like I said, it would be a good thing to add; I think we're in agreement on that. But we do what we can with limited volunteer resources. The one sure way to speed this particular issue is to submit code. I'm sure we will get to this -- it's just a matter of when.

Switching to "active" for now, just for visibility purposes in case someone wants to try their hand at submitting such a module.

Comment #7

Ela CreditAttribution: Ela commented 22 February 2011 at 05:47

subscribing for future updates.

Comment #8

killes@www.drop.org CreditAttribution: killes@www.drop.org commented 20 June 2011 at 14:09

Version:	6.x-1.0	» 6.x-1.x-dev
Assigned:	Unassigned	» killes@www.drop.org

working on this

Comment #9

mcdruid

🇬🇧🇪🇺

CreditAttribution: mcdruid commented 17 September 2011 at 19:43

n.b. that although it's not made it into a stable release yet (at time of writing), some support for protecting the contact form was committed not long after killes posted above. It's in the current dev release.