gotcha for D6

hutch - August 6, 2008 - 22:26
Project:Gotcha - Contact Spam Catcher
Version:6.x-1.x-dev
Component:Code
Category:task
Priority:normal
Assigned:hutch
Status:needs review
Issue tags:accessibility
Description

This is a useful module that is stopping bad traffic very nicely for the most part, I've only had one spambot that did not fill in the hidden field, must of been parsing the css. I will be moving some sites to D6 in the near future, so I rolled a D6 version in preparation.

Attached is a prospective gotcha tarball for drupal 6.x
The menu and form insert works and the hidden field is there, I stuffed some data from a live site (on D5) in and it displays in the log table.

Unfortunately I cannot test it 'in anger' as I don't have a D6 contact form being abused to test it on, the code is the same as for D5 with a few bellsnwhistles and no more dependency on the spam module.

Hope this helps someone.

AttachmentSize
gotcha-6.x-beta.tar_.gz6.88 KB

#1

NancyDru - August 28, 2008 - 15:54

Thanks for the code. Well, I have to jump through Windows hoops to view this patch, so it will be a bit.

I am debating on whether to continue this module with the introduction of Mollom and the delays in Spam. Comments are welcome.

#2

hutch - August 28, 2008 - 17:43

Personally I'm happy with what gotcha does and have applied the principles on non-drupal contact forms and it has stopped the garbage there as well as a couple of drupal sites.
Mollom is certainly very impressive as I would expect from Dries and is the right tool for for high profile, high activity multi user sites but for the sites I'm dealing with it would be overkill.
I would suggest that gotcha just needs a bit of a cleanup, a couple of added admin settings (the ability to change weight and fieldname) and that would do nicely.

#3

the1gofer - January 27, 2009 - 16:35

Any word on an 6.x implementation?

#4

NancyDru - January 27, 2009 - 16:53
Status:active» postponed

First I have to upgrade it for Spam V3.

#5

tiendoan - February 24, 2009 - 01:57

+1 for upgrade please.

My site is non-English and Mollom doesn't quite work (or is it just me?).

Thank you,

Regards

#6

NancyDru - February 24, 2009 - 04:30

I will get to this when I can.

#7

TheresaB - March 18, 2009 - 15:24

How does effect screen readers? For instance a visually impaired or blind person visits the site using a screen reader. The screen reader still "see" the display:none field as screen readers ignore CSS rules and the person using the screen reader will then fill out the field and thus their submission will erroneously be labeled spam.

I ask because the sites I work on must follow section 508 for accessibility and thus be able to work with screen readers.

#8

mdlueck - March 18, 2009 - 23:02

+1 Mollom is cost based. I would rather something free for our NPO clients.

For now I guess I will install Captcha once again...

#9

TheresaB - March 24, 2009 - 17:36
Title:gotcha for D6» gotcha for D6 - Accessibility

Any response to the accessibility issue?

#10

NancyDru - March 24, 2009 - 20:03
Title:gotcha for D6 - Accessibility» gotcha for D6

@TheresaB: is there some way to mark a field to not be read that would not also be used by a spambot to skip it?

@mdlueck: Sorry. If anyone is willing to fund this, then its priority will go up.

#11

TheresaB - March 25, 2009 - 19:54

Nancy, no not by using CSS. As you probably know you can either define a display:none;, which is used for such things as skip navigation to facilitate screen readers not having to constantly repeat a site's navigation before getting to the content of a page, and visibility: hidden;.

There is no way to hide a field, that I know of, so that a screen reader will not "read" it. What you see when you turn off all css on your site is what the screen reader will see and the order it will see it in.

I want to note I so appreciate your efforts in this, in providing a way to help curb the spam bots from making a mess of one's site and for those that do not have to comply with accessibility standards this is a very good way to differentiate between whether a human or bot filled out the form.

Thank you Nancy for all your work with this module.

#12

NancyDru - March 25, 2009 - 21:14

Doesn't it have a description that says to skip the field? I can't remember.

#13

TheresaB - March 26, 2009 - 18:23

If your speaking of a "skip nav" no, just a display:none; is all. Screen readers completely ignore CCS styles.

The only other way to skip anything is the alt tag for images if you do not define an alt tag the screen reader will read the name ofthe image, which not only does not convey any useful information to the person using the screen reader but will be very irritating if the site makes use of graphics for visuals and/or layout. The alt tag is then used to provide a short description which will be read instead of the image name and conveys meaning to the person using the screen reader. If the graphic is only being used for decorative or lay out a empty alt tag will cause the reader to "skip" reading the image all together, such as alt="".

There is no command, that I am aware of that will instruct a screen reader to "skip" an element in the code. I wish there was as it would make my life easier. ;)

#14

mgifford - April 4, 2009 - 14:35

adding accessibility tag

#15

NancyDru - May 9, 2009 - 18:46

See the note on the project page. I have one site left using this, but as soon as I can, it will be switched to Mollom. If someone wants to take thsi module over, open a "task" issue.

#16

hutch - June 9, 2009 - 14:24
Assigned to:Anonymous» hutch
Status:postponed» needs review

A development version of gotcha for D6 is now in CVS.

#17

hutch - June 17, 2009 - 21:44
Version:5.x-1.x-dev» 6.x-1.x-dev

6.x-1.x-dev is now available under View All Releases

#18

keinstein - August 2, 2009 - 12:25

I don't see Mollom as an replacement for Gotcha. We run a site, where people submit confidential information via web form. To limit the potential risk of disclosure we can't forward the form to any other party than recessary.

An improvement for this module would be a local honeypot page. That can be a hidden Page (preferably the first Link on the page), which contains a link and a formular, which will blacklist the poster immediatly on access. Search engines can be prevented to index the page and to follow the link by setting the robots meta tag to noindex,nofollow.

#19

dbeall - October 22, 2009 - 23:22

I see this is moving to D6.. so this is old news, but the project page asks for comments about using Mollom.
My tiny comment is; Have you looked at text in the e-mail that is received when using Mollom? well, that is why I won't use it. My web site subscribers/users would see that and delete their membership.

#20

hankpalan.com - November 18, 2009 - 17:24

I"m not a big fan of Captcha and forcing my users to fill out a form, but the spam module is hard to configure.
I never had a problem with the Captcha and re-Captcha modules, so I'm not sure why I would use Mollom ever.
This idea is pure genius, until spammers get around it. But until then I will use it with full force.

Is there anyway to integrate this into the comments? I'm only having spam issues with comments.

+1 for continuing this module. Don't give up!

#21

hutch - November 20, 2009 - 12:26

Gotcha works on the form_id, it is currently set to work on
contact_mail_page
contact_mail_user

try adding

    case 'comment_form':

immediately below
    case 'contact_mail_user':

in function gotcha_form_alter() which is circa line 118 in gotcha.module

I just did a quick test, the hidden field appeared in the comment form so it should work ;-)

#22

hankpalan.com - November 20, 2009 - 18:41

It would seem this would work but for one small problem:
If you have ajax comments installed you get this error:

An error occurred.

/ajax_comments/js
<br />
<b>Fatal error</b>:  Call to undefined function  contact_mail_page_submit() in <b> /modules/gotcha/gotcha.module</b> on line <b>338</b><br />

And then it hangs.

Looking at line 338:

// Looks okay, so send it on to Contact.
    contact_mail_page_submit($form, $form_state);
  }

It is apparent that its trying to submit to the mail page but since this is comment it won't work?

#23

hankpalan.com - November 20, 2009 - 18:44

I opened up a separate issue for the inclusion of comment form for gotcha. #638626: Gotcha for Comments

 
 

Drupal is a registered trademark of Dries Buytaert.