Webform support

I have created a patch for webform support in Mollom. The problem with the former patch was that it just did the plain captcha protection and didn't offer the possibility to assign the proper fields of your webform to the proper title/name/mail/body/... submission data of mollom.

With this patch you get an extra tab under the Mollom settings where you can map your webform fields to the data mollom will send as name, mail, body, ...

Only after you have enabled the form there (enable checkbox in its row), your webform will appear under "Spam protection settings" in the general Mollom settings.

I know the interface isn't superb, but it should do the job for now.

Note to Dries and others who wrote this module... Why isn't this module implemented hooked so we can use our own modules to add protection for our own fields? Full Drupal style that is :)

Nevertheless Mollom is awesome ;)

Apply this patch to the latest CVS version.

I have the same issue with protecting webforms. I tried the two patches.

The first didn't had any effect and all submissions went through.

The second produced the following error message on the settings page:

warning: Invalid argument supplied for foreach() in /var/www/vhosts/imagexmedia.com/subdomains/myprogrammer/httpdocs/sites/default/modules/mollom/mollom.module on line 212.

It also showed the CAPTCHA on every form submission, clean text or not, and if the CAPTCHA was entered the form did not submit.

I hope this issue can be resolved soon as the Mollom service is very good and helpful.

Subscribing. Our company would like to standardize on Mollom rather than captcha and this is the issue stopping us. If/when we are able to put resources into adding Mollom support to Webform this thread will be updated.

Subscribing as well...

+1 for this functionality and populist's approach. We expect to be testing this patch within a few days.

^{benjamin, Agaric Design Collective}

Any chance of a patch getting rolled against 6.x-1.5, Ill take a look at this myself anyhow, any advice?

subscribe

subscribing

subscribing
be nice to see this rolled into mollom

subscribe

Hi
How do I use the patch? do I replace the code in mollom.module with that in the patch?
Thanks
Phil

Following. Let me know if any help is needed on the Webform side.

I wonder if we can make this more generic so that it will work with _any_ form, not just webform forms. If not for Drupal 6, we should certainly improve the form API in Drupal 7 to help make this possible. What we'd need is (a) a form registry and (b) the ability to inspect every form in the registry.

Dries, that would be even better. But for now a mollom hook would be great. I think we need to fix this for Drupal 6 now too.

So, we have the maintainers of Mollom and Webform posting, but what now?

This functionality is desperately needed! Webform is almost useless without this... and I can't imagine imposing a CAPTCHA on our prospective clients.

subscribing

It is high on our TODO list. I've also asked Wim Leers to look at this as soon he has some time.

Subscribe for D6 version

Subscribe for D6

I get the following with the patch in comment #5:

Hunk #1 FAILED at 83.
Hunk #2 FAILED at 96.
Hunk #3 succeeded at 206 with fuzz 1 (offset 10 lines).
Hunk #4 FAILED at 711.
Hunk #5 succeeded at 987 with fuzz 1 (offset 238 lines).
Hunk #6 FAILED at 1063.
4 out of 6 hunks FAILED -- saving rejects to file mollom.module.rej

On our site, we put together a little hack for our webforms. We tried to make it general, defining three new hooks so arbitrary forms can use mollom:

hook_mollom_form($form_id): What kind of mollom analysis should be done on this form?
hook_mollom_data(&$form, $form_state, $form_id): Map form data to mollom request data (post_title, post_body, etc)
hook_mollom_form_op($form_id, $form_state): Is this form action a preview, or a submission?

Here's an example of using these hooks in a custom module.

function example_mollom_form($form_id) {
	if ($form_id == 'webform_client_form_1') {
		return array('mode' => MOLLOM_MODE_ANALYSIS);
	}
	return array();
}

function example_mollom_data(&$form, $form_state, $form_id) {
  $data = array();
  if ($form_id == 'webform_client_form_1') {
	global $user;
	$values = $form_state['values'];
	$webform = $values['submitted'];
	$data = array(
		'post_title'    => $webform['subject'],
		'post_body'     => $webform['content'],
		'author_name'   => isset($user->name) ? $user->name : NULL,
		'author_mail'   => isset($user->mail) ? $user->mail : NULL,
		'author_url'    => NULL,
		'author_openid' => isset($user->uid) ? _mollom_get_openid($user) : NULL,
		'author_id'     => $user->uid > 0 ? $user->uid : NULL,
		'author_ip'     => isset($values['nid']) ? NULL : ip_address(),
	);
  }
  return $data;

This is by no means perfect! Some of the caveats:

• No GUI way to specify anything, it's all code. This is designed to be the lower-level of a more extensive system.
• hook_mollom_form is called on every form, perhaps it should be cached?
• There is still no good way to dynamically decide (based on the properties of $form) whether a form should be mollom-ized.
• The code includes some workarounds, pending resolution of bugs #332629: hook_mail should set $message['body'] to an array and #272059: Contact email not submitted after CAPTCHA is solved

I'm mostly just throwing this out for comments on the hook structure--do people like this as a way to extend mollom?

For what it's worth, I've been using Populist's #5 patch successfully so far.

I'm subscribing to this one too. Also need to figure out how to test patch, etc. so I can help out. BTW, love Mollom and have it working now on a Drupal 5 & 6 site in active use. Other than the Webforms in use on those sites, Mollom is working great in blocking spam...

Just to confirm that the patch by evolvingweb-vasi has been working very well for us.
Before getting Mollom setup with our webforms, I was getting 10 junk submissions a day being sent to my Blackberry.

It occurred to me that once people start submitting things other than comments to mollom for analysis, data privacy becomes an issue. Does Mollom's EULA say anything about this?

Why cant any of you reply and say how to use the patch. It is precisely this sort of unhelpfulness that makes Drupal hard to get to grips with. Perhaps it is obvious to you what to do with the patch but it is not for me.
Please can someone respond with a little helpful comment.

@AlpesInfo: there is plenty of helpful documentation about patching here - http://drupal.org/patch/apply

Subscribe for D6 version

Sorry to drop out of sight for a while, but I was diagnosed with breast cancer in October and its been no end of fun and games ever since! Recovering from surgery at the moment, and it appears (crossing fingers) as though all the cancer is gone. I'll know more after I see the cancer doctor later this month...

In any case, getting back to this subject I'm really confused! Appreciate the reminder link from Rowanw on how to test patches:
http://drupal.org/patch/apply

As this subject started with a post by populist back in May, with the cited version being Mollom v:5.x-1.3, can I assume all of these patches in this thread are for the Drupal 5, Mollom module?

Then there's the confusion over which patch to test.
The thread start was by populist
Comment #1 by Davy Van Den Bremt has an update for that patch
Comment #5 by populist has a newer patch to fix issues mentioned in #1
Comment #23 by evolvingweb-vasi has yet another patch with something on the hook implementation (on which I'm rather lost!)

Bottom line is that I see two different patches that need testing. The one in Comment #5, and the one in Comment #23. If I'm wrong on this assessment, please correct me! My plan is to test both of these out - separately - on a development install here.

In Mollom 6.x-1.6, I have a checkbox for "Protect Webform forms." Is it safe to assume that Mollom does support Webform for D6 now?

@Irene Kraus,

Yes evolvingweb-vasi's patch in #23 is an entirely separate idea, based on providing hooks. It's based on Drupal 6.6
Feel free to call or email me if you need any clarification about what evolvingweb-vasi is doing.
All our contact info is at this page: http://evolvingweb.ca/contact-us
I wish you a speedy recovery!

@pcorbett,

No, unless you use the patch in #23. It's been working great for us. Out of the box, Mollom can protect the "Add a new Webform" node creation form.
Yes, it's quite misleading!

Does anyone have a Drupal 6 version of the patch?

I manually applied the code in the patch for 5x to my 6x installation, and it adds the fields but on submission I get the following error:

Fatal error: [] operator not supported for strings in C:\testingserver\pixelclever\sites\all\modules\mollom\mollom.module on line 274

It turns out the problem was caused because webform sends the body as a string rather than an array. I created this patch for Drupal 6 which does a check to see if the submission is coming from webform and if so add the link with .= instead of []. Now all works well for me.

Just to clarify, this patch is for Drupal 6 against Mollom 1.6

Update: There are some problems with this patch. Mollom is shown at all times rather than only when a suspect spam is sent and also the audio captcha doesn't work.

subscribing for D6

Is this still in progress? It's critical for us to have. We will subsidize the development of a patch, if there is a qualified developer out there who would create it but cannot afford to make time to do so.

subscribing for D6

Subscribe

Subscribe

@Digital Deployment: we plan to add this to Mollom 1.7 (next release) but we could use some help. We haven't started the work yet, but can broker this work.

I've been meaning to find time to test out the Drupal 5.x patch, but found out I had to undergo chemo treatments for the breast cancer. Not been feeling too hot!

Have gotten the TortoiseCVS mentioned on the page below for testing within a Windows system downloaded from here:
http://drupal.org/node/60179

Was going to take a shot at doing that later this week, if my eyes will cooperate so I can read. I've never worked with CVS before, and haven't had any luck in finding a 'beginner' tutorial on working that out. 'Course, I plan to test on a development install here first, just to confirm no impact on anything else on live site before it heads there. Was also planning on taking some screen shots and so-forth as I do, which could be used to supplement your documentation for that area. (To help out folks like me!)

Sorry if anyone's been holding their breath on me!

Running the patch and it invokes, but mollum admin buttons do not appear on webform submissions-- not sure how easy that would be because they are not stored as nodes. This, however, makes it difficult to report spam treated as ham, as spam. FWIW. Thanks.

@Irene

Sorry if anyone's been holding their breath on me!

There is no need to be sorry...

Life has it's priorities, and yours is nothing but your recovery.

Warm regards from sunny México!
:-)
Pepe

@Irene,

Ditto #44. Best wishes for your recovery.

Ken

Subscribing.

@Dries: any change this will be available for D6 1.8? If so, is there a date set for this release?

@All: Does someone has a working patch for D6 1.7, I have Captcha working for the moment based on #35 but I rather have the text analysis :p

Subscribing for D6 1.7

I'd like to add support for webforms to the next Mollom release for Drupal 6. I won't have the cycles to work on this until after DrupalCon DC but if a patch emerges, I'd probably be able to roll a new release. Any help for D6 is appreciated. Thanks.

Patch from #47, adapted for 6.x-1.7 with some minor changes to the validation of the mollom-webform-settings form. I'm new to this, so use with caution, if at all.

@Dries - could we setup a bounty? I noticed the bounty module and the donorge site are abandoned. I would chip in. Any recommendations for how we do this?

subscribe

#51 worked for Drupal 6, thank you smautf and populist.

Moving version.

#51 seems to work for me. Will watch it and see.

One gui hiccup though: using a fixed width theme, the webform component selection extends way off my main content under the right sidebar. This seems partly due to the popup menus auto-sizing to all to fit the largest text in that form.
For example - of 3 fields named Name, Email, and A Very Long Name That Causes The Problem. The 3rd field makes the first two popup menus size to its width and making the whole display wider than need be.
However, even without that very wide field, the 5 columns tend to be too wide for my (and probably many) fixed width themes.

You're right about the GUI problem - using this with a fixed width 960px theme with two sidebars looks terrible in most cases. If it extends under the right sidebar, where you may have text or other blocks, you could loose some functionality.

See also #412760: User interface brainstorming for some UI brainstorming that would assist with Webform integration.

Subscribing

Subscribing too

My workaround for hidden columns was to only show the first 15 characters of the longer fields, which is achieved by replacing

 $components[$component['form_key']] = $component['name'];

with

$components[$component['form_key']] = drupal_strlen($component['name']) > 15 ? substr($component['name'], 0, 15).'...' : $component['name'];

in mollom_webform_settings().

It's a hack but at least I can see the columns now.

subcribing

What about webforms where there is no real 'body' field? For example, we have some forms which are used for registrations, and contain name, URL, email, etc, but no textarea-like fields. The patch should contain some guidelines as to what to do in that case in the help text.

@deviantintegral - For some types of forms, it would be very difficult for Mollom to decipher what is spam vs. ham due to the lack of written content. For these cases, Mollom integration could simply be on or off (ie. show the captcha on this form 100% of the time). If it would make implementation simpler, perhaps this is what initial Mollom integration could look like?

Yeah, that might be the way to go. I have mollom enabled for these forms mainly because we're getting hit with bots filling in completely random characters. But if they ever get smarter, I can see us having to move to captcha-enforced down the line.

subscribing.

Subscribing

I tried the patch for 5.17 but it doesn't appear to be working. I can see it webform in the mollom settings but when I do a submission it doesn't block it.

Just a note after one year of this issue: the better, more complete, more Drupal and perhaps faster solution would be integration with CAPTCHA API.

The difference is that mollom only kicks in if it thinks the content is a spam, captcha is allways on. The biggest problem is that mollom doesn't really know how to interpret each field.

@BWPanda:

I had the same problem. The fault lay in mollom_menu() in the definition for the contact form:

  $items['mollom/contact'] = array(
    'title' => 'Report and delete',
    'page callback' => 'drupal_get_form',
    'page arguments' => array('mollom_report_contact'),
    'access arguments' => array(TRUE), // Everyone can report contact form feedback.
    'type' => MENU_CALLBACK,

The 'access arguments' value -- TRUE -- simply didn't work. Changing it to 'access content' did the trick for me.

'access arguments' => array('access content'), // Everyone can report contact form feedback.

@baroquem: Thanks for finding that bug. I filed a patch in #486798: Fix 'access arguments' to 'access callback' in mollom_menu().

I just committed #486798: Fix 'access arguments' to 'access callback' in mollom_menu() to the Drupal 6 development branch. Thanks baroquem and Dave Reid.

subscribing

Subscribing.

I applied patch #51 with Mollom 1.9 it seems to only work when the webform settings are on "CAPTCHA only" and not "Text analysis with CAPTCHA backup".

A hook_mollom is the right way to do this. A lot of the work here IMO should be done by the webform module.

Hook discussion is at #245682: Enable use of Mollom for any form I made some notes here as well

I've installed Mollom 6.x-1.9 and the patch in #51. It seems to be working with no problems, though I don't know how to test a form actually getting spammed.

Thanks for all the work. Looking forward to something like this being incorporated into the module.

I don't think this webform support method will ever be incorporated into the module - as pointed out by johnskulski, #245682: Enable use of Mollom for any form, or any other more general approach, would be preferred. We shouldn't need to patch mollom for every type of form out there.

The patch in #51 should work when applied to Mollom 6.x-1.7, but it will never serve as anything more than a temporary fix.

Need this feature request. Subscribing.

This seems to be taking forever. I appreciate that this is a complicated issue and Mollom is a complicated module, but while we're all waiting for a universal 'Mollom can handle any form' solution, it makes sense to me to enable Mollom to protect webforms, and this functionality can later be removed and replaced with the catch-all functionality.

Here is the patch from #51 rolled against Mollom 6.x-1.9. I hope this works ok for you.

subscribe

Does anyone know if the patch in #84 will also work on Mollom 6.x-1.10?

The patch in #84 does not work with 6.x-1.10

OK, I downgraded the Mollom installation on the site I've been having trouble with webform spam on back to 6.x-1.9 and applied the patch in #84, but it doesn't appear to have done anything. I don't see any new options in Mollom's configuration screen, and when I view any of the spammy webform submissions I've been getting, I don't see any "report to Mollom" link or anything like that.

Should there be any visible changes from applying the patch? Or is it supposed to just protect the webforms "behind the scenes" somehow, without anything being visible unless someone does submit spam?

I considered testing it by copying and pasting the text of one of the spam submissions into a new submission, but I don't want Mollom to start thinking I'm a spammer... Is there any other way to tell if it's doing anything?

Edited to add: apparently it isn't. The client tells me the spam is still coming in. So this patch doesn't appear to work even on version 6.x-1.9, never mind 6.x-1.10. :-(

@spidersilk

If I recall correctly there should be some extra settings you need to configure for that patch. Look for a new tab (?) in the Mollom configuration page, what you need to do is tell Mollom how to interpret each webform field.

Also, check out the Mollom developer documentation for instructions on how to test if Mollom is working.

I apologize if this has already been mentioned, or if it's the wrong forum:

Mollom seems to be working great on my sites with webforms, but I've noticed it doesn't seem to protect Webform Blocks.

I just thought it would be worth a mention.

Does anyone have a working patch for mollom 6.x-1.10?

Temporarily marking critical to get maintainer's attention. This has been sitting here forever. We shouldn't need to reroll again for the current Mollom version after we've rerolled 3 or 4 times already, so I'm leaving at RTBC.

@mcrittenden: That's not what the priority is for.

In fact, we don't currently have a working patch (based on the reports since 6.x-1.10 released), so I'll fix that as well.

@ScoutBaker: I know what the priority is for, and I also know what the issue queue is for but when the issue queue isn't used properly (i.e., working patches are ignored for months) then IMHO we can use the priority improperly as well. After all, we have to get maintainers' attention somehow.

But, since Dries has said he wants to go the "works for any form route" and since Dave Reid just announced in #245682: Enable use of Mollom for any form that he's going to be working on it ASAP, I'm going to mark this as dupe in favor of #245682: Enable use of Mollom for any form

A patch to enable mollom to be used on any form is a long way off. People can get the benefit of webform integration right now. I would certainly not call this a duplicate of the other issue and I urge you to do the same. We could be months away from allowing mollom to be used on any form but with a simple reroll, this patch will be working with today's version of mollom.

We are not months away. I hadn't been able to devote as much time to the proper approach for this problem since I've been a co-maintainer of this module, and for that I apologize to everyone in this issue and to Dries. However, I'm determined to get this finished *properly* by the end of the week.

@timhobert: The setting on the Mollom configuration page for webforms is to protect the form that you use to create a webform.

Patch from #84 adjusted for 1.10. Seems to work so not sure why it's been a month.

The function mollom_mail_alter was changed from release 6.x-1.9 to 6.x-1.10. It now only adds the 'report as inappropriate' link to a subset of the e-mails. The attached patch for mollom version 6.x-1.10 is a full patch that also adds the webform_submission e-mails to the list in mollom_mail_alter.

#245682: Enable use of Mollom for any form is currently up for review, and (assuming no major bugs) it'd be better to just get the other issue done it seems.

Agreed with #101 is the way to go.

However, the original patch that @populist made was deployed on a live site and we needed to re-roll the patch for 5.x-1.8. Maybe someone else could use it.

Anyone experience any issues with the Webform update to 6.x-2.8 and the above patch in comment #100?

Have we reached relative consensus that the Mollum support for any form is the way to go?

@kenthomas: Yes this issue has already been marked a duplicate of the general form solution. If anyone needs this now, they can apply the patches provided by peers themselves, but warning that it might not upgrade to the any-form code.

subscribing

subscribing too

What is the current support status of WebForm as of mollom 6.x-1.12?
Is it now included or is there a patch?

For all you people subscribing or asking about this patch, please note that this issue was covered in #245682: Enable use of Mollom for any form which has been committed. That's why this is marked as a duplicate. Please check out that issue and file any further problems in followup issues.

so its a patch...i will wait for the new release...

Anyone interested in a fix for webform 6.x-2.9 using mollom 6.x-1.12. The following patch worked great for me.

#4 at http://drupal.org/node/686136

I just saw this post http://buytaert.net/latest-mollom-module-ships-with-webform-support

and tried both the latest module for Mollom and Webform(dev). Spam still seems to be getting through though.

Is this working for anyone else or do I still need a patch?

@hixster It works with the latest Webform 6.x-3.x-dev. There was a bug in the release that quicksketch made that didn't allow the Mollom integration to work.

Thanks for the quick response Dave. I am using today's dev 6.x-3.x-dev and am getting spam? Do i need to patch the module?

Did you actually enable Mollom protection for your specific webform at admin/settings/mollom/add ?

Yep, add form says:

All available forms are protected already.

And these are the settings I have for webform.

Webform form Text analysis and CAPTCHA backup Configure Unprotect

- Strangely enough, when I configure the webform, i only have title and body option displayed. Maybe my custom fields aren't being checked?

- Also, the ' Link to Mollom's privacy policy on forms protected by textual analysis' doesn't do anything, no link is added to the form.

That's the form for webform nodes, not webform submissions. You should see forms like 'Webform: My webform' in the Mollom settings.

o.k. that seems to be the issue. 2 of my forms are missing, but clicking 'add form' results in the system message
'All available forms are protected already.' ?

Maybe try clearing your site's caches (admin_menu or via admin/settings/performance). Also double check that you're using absolute latest version 6.x-3.x-dev of Webform.

Yep, cleared all caches, still no joy. I'm using the dev version i downloaded today (6/4/2010) from the main webform module page.

It seem no webforms are being listed at all in the module settings and i'm unable to add any either.

The problem is in webform (6.x-3.0-beta4) module.

in webform.module change line 2789 from

while ($node = db_fetch_object($node)) {

to

while ($node = db_fetch_object($result)) {

Installed the beta5 version of webform and it is still not working with mollom. Lines have changed since the fix recommended in #121. I'll search for the string, but if that doesn't work I'm open to suggestions. Let you know how it goes.

That string is now on line 2816 and has already been changed. AAnybody else having problems with webform and mollom?

Can someone lock this issue? It's been a duplicate since September.

At least 3 people can confirm that Mollom 1.13 plus Webform 3 beta5 works. See #765716: Location of version that supports webform? if you're still having problems, and you need to provide details and check your setup carefully.

This issue is full of noise and is duplicate / massively outdated, please don't use it.

As this report has been marked as duplicate of #245682: Enable use of Mollom for any form, it's perfectly useless to comment here. I am going to close comments on this report.