How to protect your contact forms from spam bots
Lately, I got a lot of spam emails into my inbox, coming from the contact forms on my website. At first, I ignored all of it, because it was 1 every week. But suddenly, I started to get dozens of spam messages every day. The good part is that I am the only one who receive those spam messages, and all of them got into the spam folder ( due to the content ). The bad part is that the IP Address of the website might get banned and marked in blacklists.
A simple solution to this is to use a captcha. In wordpress, most contact form plugins have captcha support. But since I hate captcha, I don’t want to annoy others with it. I searched for a better solution. Spam bots that are accesing the website only to send some automated spam messages have a behaviour that a human can’t have. For example, they don’t load javascripts or images, they want only the html code. Having this in mind, it is simple to catch them, a simple javascript code that have to be run and produce a result, inserted in any page, can figure out if behind the computer who access the page is a human or not. This technique is called as honeypot.
Fortunately, I was using Contact Form 7, and there is another plugin that will add honeypot functionality to the plugin. Simple as always, with 1 click you can resolve many issues in wordpress.
Disclosure: Some of the links in this post are "affiliate links." This means if you click on the link and purchase the item, I will receive an affiliate commission
March 25th, 2013 at 1:46 am
Adding a service like Incapsula or Cloudflare can also reduce the bad traffic that accesses your site. Additionally, Cloudflare can speed up your site with their content delivery network.
March 25th, 2013 at 8:51 am
Thank you for the suggestions. However, today speed is an issue, and using an external service for everything you want to achieve will make your website to load slowly, because the user have to make a connection to several web servers to access a single website. Whenever it is possible, I try to find self-hosted solutions.
March 28th, 2013 at 10:33 am
[…] Recently I started to install a complementary plugin to prevent contact form spam messages: “honeypot for contact form […]