Hi,

I'm running Drupal 6.14 & Mollom 6.x-1.13.

To reproduce:
1. Enabled Mollom module
2. Entered public & private key - submit. Server reports : "We contacted the Mollom servers to verify your keys: the Mollom services are operating correctly. We are now blocking spam"
3. Enabled the site wide contact form
4. From an browser that isn't logged in (Anonymous User). Goto the contact form - entered text I received in a spam email, submit
5. Receive a captcha challenge. Enter the captcha. Browser reports : "The CAPTCHA was not completed correctly. Please complete this new CAPTCHA and try again.".

Inspecting dblogs, I see the following:

Message	Incorrect CAPTCHA:

Array
(
    [name] => Alaba Ackman
    [mail] => alabaackman@circleup.com
    [subject] => No more books for MBA
    [cid] => 1
    [message] => Nominate for Ph.d award

GET YOUR DIPLOMA TODAY!

If you are looking for a fast and effective way to get a diploma,(non accredited) this is the best way out for you.

Provide us with degree you are interested in.

Call us right now on:

For US: -------------

Outside US: +1----------- "Just leave your NAME & PHONE NO. (with CountryCode)" in the voicemail.

Our staff will get back to you in next few days!
    [copy] => 
    [op] => Send e-mail
    [submit] => Send e-mail
    [form_build_id] => form-074d434179c4d657640f742c411ed2f6
    [form_id] => contact_mail_page
    [mollom] => Array
        (
            [session_id] => 1276876972-10061821104133fc36
            [captcha] => kciit
        )

)

There was no report of an invalid session id. There is a user record of id 0. So, I don't think this is a session issue.

I can't see any way to inspect logs on Mollom - so I have no insight as to why this captcha was rejected. Any help is appreciated!

CommentFileSizeAuthor
#11 Screen shot 2011-03-23 at 09.34.53.png198.29 KBkenorb

Comments

sun’s picture

Do you have any external caches/proxies enabled? Or is your site based on the Drupal Pressflow distribution?

developer-x’s picture

I have Page level caching set to aggressive, block level caching is off - other than that, I have no caching. I'm not running Pressflow - standard Drupal 6.14 install.

sun’s picture

Hm, that doesn't ring a bell yet. I guess that setting page caching to normal or disabled does not make a difference. (did you try?)

  1. Are any warnings or errors displayed on the status report page?
  2. Make sure you do not have your Mollom keys enabled for developer mode on http://mollom.com.
  3. Are any external caching/proxy modules/extensions/applications enabled? (i.e. Boost, Varnish, Nginx, a load balancer, magical cloud hosting, etc.)
  4. Are any other filtering extensions enabled? (e.g., Akismet, Apache modSecurity, etc.)
  5. Are cookies allowed in your browser? (i.e., cookies for third-party sites)
  6. Is there are record for uid 0 in the {users} table?
  7. Are sessions for anonymous users enabled? E.g., http://drupal.org/project/no_anon module conflicts with Mollom.
  8. Is any of the following modules installed: Facebook Connect (fbconnect), Form?
  9. Are there any custom changes to forms applied? (i.e., hook_form_alter() implementations specific to your site)

What is your public Mollom key?

sun’s picture

Status: Active » Closed (won't fix)

Sorry, without further information this issue can only be marked as won't fix.

Feel free to re-open this issue if you want to provide further information. Thanks.

armanschwarz’s picture

This shouldn't be closed its a persistent issue and easy to reproduce. Just install mollom along with fbconnect - it's impossible to pass the captcha when registering a new account through the facebook connect button. I'm using both the latest Drupal core, latest mollom module, and the beta10 (ie. latest) fbconnect module. Just turn fast registration mode off and the problem happens. Although since this is the first issue I've ever had with mollom, and since fbconnect is still in its infancy, I would suspect it's a problem with fbconnect...

sun’s picture

Problems with fbconnect have been reported by others before already; hence, my question for whether it's used in #3.

The same people having problems with fbconnect reported that the "Drupal For Facebook" module would be a working alternative. I've never used any of those modules, so I can't comment on their quality or functionality differences.

armanschwarz’s picture

Ok I was able to reproduce this error using the CAPTCHA module, so it's not mollom's fault. Here is the code that gets passed when a user chooses to register (and is thus prompted with the registration page):

/**
 * Menu callback.
 * Called when user perform facebook registration
 */
function fbconnect_register_page($form_state = array()) {
  $conf  = fbconnect_get_config();
  $fbuid = fbconnect_get_fbuid();
  $data  = fbconnect_get_info_from_fb($fbuid, 'name, proxied_email');
  $form  = drupal_retrieve_form('user_register', $form_state);
  $site  = $conf['invite_name'];

  drupal_prepare_form('user_register', $form, $form_state);

  $form['name']['#default_value'] = $data['name'];

  $form['fbconnect'] = array(
    '#type' => 'fieldset',
    '#title' => t('Facebook Connect'),
  );

I can't spot any problems with this, but I'm sure you guys know this hook_menu stuff better than me so if you could point me in the right direction maybe I could propose a solution to the facebook connect team.

sun’s picture

That looks pretty weird, but perhaps they have a reason to fiddle with Form API functions manually. That said, I'd have to do an extensive code review of fbconnect to figure out what they are doing wrong, what they are trying to do, and what they should have done instead. I'll try to do that, but can't promise when I'll get to it.

armanschwarz’s picture

Thanks for your input, and if you do get a chance to look at it just post back here and I'll convey it to them...

developer-x’s picture

Sorry for not getting back. I ended up going with the CAPTCHA module which met my needs. Sorry I wasn't able to help narrow down the problem. So, as far as I'm concerned, this issue is resolved.

kenorb’s picture

StatusFileSize
new198.29 KB

The same problem, but on the registration form.
Captcha is rejected each time.
I had SecurePages, I've disabled it.
I had OpenID and fbconnect, I've disabled it.
Disabled HTTPS as well.

Message	Incorrect CAPTCHA
Data:

  session_id = '1103231133859594de'
  captcha_result = 'RARZW'
  author_ip = '62.25.109.195'
  author_id = NULL
  author_name = 'kenorb'
  author_mail = 'kenorb@niepodam.pl'

Result:

false

I've Pressflow 6.20.97
Checked #562374: Mollom incompatible with Pressflow's (and Drupal 7's) session handling -- causes CAPTCHAs to fail, my version has this patch.
What's weird, doesn't work on dev, staging and live, does work on my local.
I've upgraded from 1.14 to 1.15, no help.
My public keys are:
My local: 8412d41ab1ce619911cb98f06d6df794
Dev: 2ddeba8f1ec95c68ce71b38bf0cf1c34
Live: ea4b7d42e1474010c576161bccb857e3

What else I can test?

kenorb’s picture

Status: Closed (won't fix) » Active

Tested on dev again with the same account details to register (Captcha 100% was correct, tried couple of times, case sensitive) on different browsers:
Firefox 3.6.15 on MacBook Pro - does work
the same version of Firefox 3.6.15 on Mac - doesn't work (Chrome 11, Safari 5, Firefox 4.0b5 the same)
IE 7.0.x on Windows - doesn't work
I'm not sure what's the connection between different computers with the same browser and the same dev site.
Audio token doesn't work as well.
It's possible that this key reached somehow the limit? Or something?

kenorb’s picture

Checked the limits, these are ok. Changing to Recaptcha or Captcha.

kenorb’s picture

Version: 6.x-1.x-dev » 6.x-1.13
Category: support » bug
Priority: Normal » Major
Status: Postponed (maintainer needs more info) » Active

Just found external website where it rejecting as well:
http://www.trellon.com/comment/reply/137
It's Recaptcha, but when you click 'Save' (without doing nothing), you'll have Mollom, which doesn't work.

sun’s picture

Version: 6.x-1.13 » 6.x-1.x-dev
Category: bug » support
Status: Active » Postponed (maintainer needs more info)

@kenorb: I'm not able to reproduce the issue on the site you mentioned - the CAPTCHA can be solved.

However, in #11, posted on March 24, 2011 at 11:23am, you pasted

  session_id = '1103231133859594de'

The first 6 digits in Mollom's session ID is the creation date of the session, encoded as YYMMDD. There's a difference of one day here.

In turn, this might mean that you have page caching or an external cache (Varnish?) enabled, which cached an old CAPTCHA session in the form. The Mollom module already does its best to inform other/external caches, which got recently improved for Pressflow in #727668: External proxies/caches.

Also note that you need the latest version of Varnish, in case you use it. That might also explain why it works on your local dev site but not on the production servers.

kenorb’s picture

Version: 6.x-1.13 » 6.x-1.x-dev
Category: bug » support
Priority: Major » Normal
Status: Active » Postponed (maintainer needs more info)

Thank you for the info. I'm not sure if there is usage of that, but my timezone is London/Europe. Maybe it was Varnish (some older version), but as far I remember, different captcha was changing after refresh. And re-captcha has no problem with caching.
Currently I stopped working on that site, they decide to change it to Re-captcha, so I'm not able to provide any further info about this issue, sorry.

sun’s picture

Status: Postponed (maintainer needs more info) » Closed (cannot reproduce)

In that case, I'm going to close this issue, since I'm not able to reproduce it.

I'm also closing comments, as these kind of issues always turn into bulk error reports of completely different issues.