HoneyPot Captcha

[danil0 1]

1 hour ago, Jack_mcs said:

I'm even more confused at this point. In your original post in another thread you said you have an MS2 shop. But in this post you said you have a 2.3.4 shop. You need to straighten out your files and only use the ones meant for your shop. I can't help until you do that.

I noticed also that the Megastore theme that is installed on this custom osc 2.3.4 has its own styles and classes... so I noticed inside contact_us.php that I edited, there was no class="form-horizontal"  setting on the echo tep_draw_form line.

So I have resolve the fields problem because was Stylesheet matter. Everything works on the admin side settings logs etc. It blocks fake accounts and tries. The only problem is that the contact us form still sending spam mails. When I enabling captcha the spams stops but the captcha image is not loading. The validation of the captcha also works as I get the answer that was wrong the code.

So do you believe I should add form-horizontal class to make captcha image work? 

[Jack_mcs 1,020]

i can't help you with your files because you are using a template. For example, you contact us page is submitting with GET.  The code is written to use POST. So you're on your own in getting this to work since it is beyond the scope of free support. Good luck.

[danil0 1]

14 hours ago, Jack_mcs said:

i can't help you with your files because you are using a template. For example, you contact us page is submitting with GET.  The code is written to use POST. So you're on your own in getting this to work since it is beyond the scope of free support. Good luck.

everything works perfect except captha image is not loading... I thought it would be easy to resolve... anyway thank you for your time until now

[Jack_mcs 1,020]

A new version has been uploaded with these changes:

• Added code to ignore IPV6 IP's.
• Added a missing sql command for MS2 shops.
• Added notification code in case the database changes fail. Reported by member @ArtcoInc.
• Changed the filtering for domains in emails.
• Changed the defined names still being used.
• Chanded installation instructions for MS2 shops.
• Corrected minor spelling and coding mistakes.
• Reduced the log size limit from 300 KB to 50 KB.
• Removed the FORM REQUIRED code for pre-2.3.4 shops.
• Removed the storage engine from the create table command. Found by member @artcoinc.

Pro Version Only:

• Added a check to prevent empty emails from being sent.  
• Added a check in Account Check to see if a customer has made orders.  
• Added sort options to the Maintenance page. 

[ScaleCreepMinis 6]

Okay, was swamped with spam accounts and installed Honeypot. Poof! Like magic they are gone.

BUT now the Contact Us and Create Account pages return HTTP ERROR 500 messages.

Running OSCOM CE Phoenix v1.0.4.2

PHP Version 7.3.20 (Zend 3.3.20)

Is there some blindingly obvious mistake I made suring install? It seemed to just be upload add/replace.

 

Also, I do not have (as far as I can tell) a table called Honeypot_track

Edited August 1, 2020 by ScaleCreepMinis

[ScaleCreepMinis 6]

Here are my Honeypot settings:

Enable Honey Pot
True

Pages
contact_us.php
create_account.php

Sort Order
0

Email Addresses Allowed
True

Email Addresses Show Message
True

URL's Allowed
False

URL Show Message
True

Create Account Check
True

Create Account Count
2

Create Account Period
10

Block Names with Numbers
True

Block Phone with Letters
True

Name Length - First
2

Name Length - Last
1

Verify Postal Code
Ignore

Verify Domain Referer Match
True

Verify State and Country match
False

Verify Time to Submit
20

Show Captcha
Numbers

Use IP List
IPList

Block IP Automatically


Bad Words


Exclude IP's


Log Tracker
None

[Jack_mcs 1,020]

29 minutes ago, ScaleCreepMinis said:

It seemed to just be upload add/replace.

Only for the new files. For the files to change, you can only use the included ones if you have the same files, minus the Honey Pot changes. You can use a compare program like Winmerge, which is free, to compare your files with those included. The needed changes are marked for honey Pot.

Regarding the tracking file, you won't have one until a block has occurred.

[ScaleCreepMinis 6]

I have a standard Phoenix install, with no mods to files beyond the main page etc. So I just used the included files as is?

[Jack_mcs 1,020]

That will only work if your version of Phoenix is the same as the one used for the included files. Since Phoenix changes so often and I never alter those files, it is unlikely they are compatible with your shop. 

[ScaleCreepMinis 6]

Crud, that must be the problem.

[Psytanium 15]

Hi,

I installed Honeypot 1.8 on OSC2.3.4, installed the module header, enabled everything, and added the word "google" in Bad Words, because i noticed all my bot accounts have the word google as company name.

But i tried to create a new account, adding the word google in the company name, but still i can easily create accounts.

How can i know if its working or not

Thanks

[Jack_mcs 1,020]

@PsytaniumYou don't say if the bad word filter worked for the contact us page or not.  If not,  look in the HP settings and make sure the contact us and create account pages are checked. I've seen in a few older shops where the pages were not being remembered. If they are set,  make sure you have the Create Account Check setting checked. It disables all create account checks when off.

[Psytanium 15]

2 hours ago, Jack_mcs said:

@PsytaniumYou don't say if the bad word filter worked for the contact us page or not.  If not,  look in the HP settings and make sure the contact us and create account pages are checked. I've seen in a few older shops where the pages were not being remembered. If they are set,  make sure you have the Create Account Check setting checked. It disables all create account checks when off.

Yes Create_account is checked.

Add Honey Pot captcha to the specified pages.

Enable Honey Pot True Pages create_account.php tell_a_friend.php Sort Order 0 Email Addresses Allowed True Email Addresses Show Message True URL's Allowed True URL Show Message True Create Account Check True Create Account Count 2 Create Account Period 10 Block Names with Numbers True Block Phone with Letters True Create Account Notify None Name Length - First 2 Name Length - Last 1 Show Math Captcha False Use IP List False Bad Words google Exclude IP's Log Tracker None

[Jack_mcs 1,020]

Then all I can think of is that you didn't make the correct changes in the files. Please compare your files with the ones in the ChangedFiles_Frozen_and_V234 directory, or even use one of those for a quick test.

Also, having the "Email Addresses Allowed" and "URL's Allowed" options set to true prevents the code from stopping most spam. I suggest you change to false and then try sending an email from your contact us page with an email address or url in the body. If the email isn't blocked, then there is something wrong in your installation and troubleshooting the contact page will be much easier. If it does work, then it means there is a mistake in the create account file.