Hi,

I installed and configured the module, but it doesn't work at all. The honeypot form field is added to the comment area, but we still get spam comments. So I used webkit's web inspector to make the field visible (http://cl.ly/ERZk), entered some data to the honeypot field and submitted the comment form. Although the comment should have been rejected, it was approved. I was logged out when I tried this and the "Bypass Honeypot protection" is disabled for guests. The watchdog shows no errors.

Is this a known problem? I'd be glad to use the honeypot-module in favor of a Captcha-solution.

Raphael

CommentFileSizeAuthor
#3 disallow-spaces-1449950-3.patch1.44 KBgeerlingguy

Comments

pheraph’s picture

OK, nailed it. The honeypot element name is not allowed to contain space characters. The field should be checked for invalid characters or at least write a message under the field.

Anyway, thanks for your module! Spambots will hopefully like the hidden field. :-)

Raphael

geerlingguy’s picture

Title: Comments are saved although the honeypot form field contains text » Disallow spaces from honeypot element name
Version: 7.x-1.9 » 7.x-1.x-dev

Retitling for clarity. Thanks for the bug report—I hadn't thought about this, but it will definitely help others if FAPI-compatible element names are enforced.

geerlingguy’s picture

Status: Active » Needs review
StatusFileSize
new1.44 KB

Patch attached. Working also on backport to D6 (should be about the same, but need to test to make sure it'll work right).

geerlingguy’s picture

Version: 7.x-1.x-dev » 6.x-1.x-dev
Status: Needs review » Patch (to be ported)
geerlingguy’s picture

Status: Patch (to be ported) » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.