Good day. The contact form on sp page bulider lets spam through. On two pages. On different hosts. Recaptcha enabled. 1300+ messages sent. Please verify if there is a security hole.
Staff replied
SP Page Builder
Spam from the contact form.
15 replies
Mehtaz Afsana Borsha Staff
Hi
Thanks for contacting us. And sorry for your issue. Could you please mention the page builder version? So that I can inform our team about it.
-Regards.
Chris Nichols
Mehtaz,
There are a number of threads started regarding this topic. There are huge volumes of spam coming through one of my contact forms even with Invisible ReCaptcha enabled. All of the messages are in Russian. Looking at over 700 messages in a few hours on 1 form. Joomla 5.1.3, SPPB 5.3.3
Mehtaz Afsana Borsha Staff
Sorry for this inconvenience. I will inform our DEV team about it, so that they can fix this bug ASAP.
Artur Asked this
sp page bulider 5.3.6
Mehtaz Afsana Borsha Staff
Ok I will inform our team about it. I hope they will solve it ASAP.
Artur Asked this
I hope they fix it in a few hours not days.
Mighty Oak
Hi I am having the same problem, to the point where I have had 3 customers contact me regarding this issue. Further my host has now blocked all sending of emails from all my customers, this really needs addressing immediately!
Artur Asked this
When will this fix be released????????
Chris Nichols
Doing further research, I don't believe this is an issue with Page Builder at all. Wordpress sites are being targeted as well. I believe either AI Bots or reCaptcha farms are being used to defeat Google's reCaptcha. I looked at my reCaptcha dashboard, and the messages are not recording a score that would block them.
I have a number of sites I've developed, and only the sites with the Contact form as a root item in the main menu are being targeted. ie url/index.php/contact-us Other sites I've deveoped have the contact page in a sub-menu, eg url/index.php/about/contact-us are not being targeted.
I installed Clean Talk, and so far it is very successful as spam has stopped. It is a paid service, but so far, I am very happy with it. Especially given the number of brute force bots it is blocking. Here are the stats, so far it has only been installed for a few hours.
https://aera.asn.au/images/2024/08/Screenshot%20from%202024-08-22%2007-56-21.png
Artur Asked this
Strange situation. I installed the Convert Forms component on a site where there was a lot of spam. It uses the same recaptcha and the problem disappeared.
Stuart Clark
SPPageBuilder's CAPTCHA plugins simply don't work!
JoomShaper are well aware of this, but are not doing anything visible to address the significant issue
Mehtaz Afsana Borsha Staff
Hi all,
Sorry for this inconvenience. Our team is working on this. Allow us some time please.
Stuart Clark
You've been aware of this issue for weeks if not months! Please give us a timescale!
George Ivory
I agree with Stuart. We need a timescale.
I have been monitoring and waiting for last couple of weeks trying different solutions.
I am limited on using other Joomla plugins in formbuilder due to its design.
Please recode formbuilder to allow other plugins and if there is a security hole fix ASAP.
Thank you
Mighty Oak
At the moment I am very dissapointed with Joomshaper as a whole. I have paid for the Easystore addon which has not been ready for actual commercial use at all so a waste of time and money from day one. Newly now I have this problem with spam in the form builder which does not seem to be very high on the agenda of fixing either which is casuing me problems with my clients!!!
Artur Asked this
It seems that the joomshaper company can't handle security. I'm increasingly wondering about changing the entire system. People report the problem en masse and joomshaper makes a joke and no reaction. Changing the form to another manufacturer solves the problem and joomshaper still doesn't know how to fix it. What are we paying for?
Mighty Oak
When is this going to be fixed???
Mehtaz Afsana Borsha Staff
Please create a new forum post about your issue.
Mighty Oak
It does not need a new forum post as the issue is the same for everyone here, loads of spam using your form builder
Mighty Oak
Still has not been fixed, do you you even care about the product or only getting money from customers??
Mehtaz Afsana Borsha Staff
Hi
Its already fixed in the latest version of page builder. Could you please keep a full site backup and check the latest version?
Kim Siebert
Good morning,
I can tell you for sure, that this problem is not solved yet. Hundrets of russian spam mails are sent through Joomshaper contact forms. With recaptcha enabled for sure.
Mehtaz Afsana Borsha Staff
Could you please create a new forum post about your issue?
Log in to reply.