You are completely NOT understanding my issue. You are correct that if you try the form, it works perfectly. However, when I activate the general form, immediately I get 40-50 emails an hour of submissions that are being submitted not validated and missing all required fields.
Please check the entries on my site and you will see. I have all fields required in the form and a real person cannot submit the information without completing the information and validation properly. But that is not the case in these submissions. The name is required and validated as alpha only and the names ALL have numbers and alpha combination when I get the submisison. There is no message in these forms. That field is required as well.
Something is very wrong. Please dont tell me that when you try to submit it validates and submits. I know that when a human does, it is good. But hundreds of spam emails are bypassing validation… I cannot use the forms and I spent money on the addon.
I am going around in circles. Neither the validation nor the required fields are working in 100’s of spam email entries…
OK. I set up a brand new form called General Form. I made everything required and captcha required… I activated the form and within 5 seconds, I got 5 entries, all missing the message field and they are all spam. I think your form doesnt really have the necessary security measures.
Any real user cannot submit the form without completing these credentials. How are these forms getting through the validation and getting submitted. I paid for this plugin and I am very disappointed that it is such poor quality security wise. Seems the spammers can get behind the form and submit…
That is not the case. You can look at the form entries and see that those entries from the forms are all spam and they don’t have the required form fields displayed. All the contact form entries are spam and we got about 100 of them over the last 2-3 days.
Entry 12 thru 167 are all spam for the contact forms. They don’t have a valid name and they don’t have a message which is required. I cannot submit the form without these credentials completed. How are they being submitted? Is there a back end door that they are getting to a form to bypass the required fields?
