Advertisement

Captcha testing and advice

This forum is for general questions about extensions for Joomla! 5.x.

Moderators: pe7er, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
User avatar
stutteringp0et
Joomla! Ace
Joomla! Ace
Posts: 1482
Joined: Sat Oct 28, 2006 11:16 pm
Location: Texas
Contact:

Re: Captcha testing and advice

Post by stutteringp0et » Mon Mar 10, 2025 11:38 pm

I was using AI to help me plan test cases. There are only a few types of bots I can't catch now - and that's because nobody can catch them. There is a new flavor of headless bot that runs in a stealth mode (no functions to watch for), operates the mouse, operates the keyboard, and doesn't use script events to control the page. For all intents and purposes, it browses like a human.

Anyway, it's those hyper-advanced bots I can't catch - but those are expensive, and unlikely to be viable for spammers.

I am really interested to hear feedback when you have it - any spam?

Advertisement
User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2805
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Captcha testing and advice

Post by JAVesey » Thu Mar 13, 2025 7:58 pm

stutteringp0et wrote: Mon Mar 10, 2025 11:38 pm I am really interested to hear feedback when you have it - any spam?
Since I updated to 5.2.15 and activated everything on the “Advanced” tab, I’ve had not one single spammy/malicious input logged on my site. Usually get a few XSS/SQL injection/etc logs each day but nothing for the last few days except a couple of “session protection” logs (where a user tries to login to frontend and admin simultaneously).

Big thumbs up from me 8)
John V
Cardiff, Wales, UK
Joomla 5.3.0 "live" site on PHP 8.3.16 and MariaDB 10.11.10 (with b/c plugin enabled)
Joomla 5.3.0 on MAMP Pro 7.2.3 with PHP 8.3.14 and MySQL 8.0.40 (with b/c plugin enabled)

User avatar
stutteringp0et
Joomla! Ace
Joomla! Ace
Posts: 1482
Joined: Sat Oct 28, 2006 11:16 pm
Location: Texas
Contact:

Re: Captcha testing and advice

Post by stutteringp0et » Thu Mar 13, 2025 9:22 pm

Sweet

gws
Joomla! Champion
Joomla! Champion
Posts: 6642
Joined: Tue Aug 23, 2005 1:56 pm
Location: South coast, UK
Contact:

Re: Captcha testing and advice

Post by gws » Thu Mar 13, 2025 9:54 pm

No Bittersweet, Bitter for the bots and sweet for my sites I am delighted by hashcash. Thank you Michael.

User avatar
stutteringp0et
Joomla! Ace
Joomla! Ace
Posts: 1482
Joined: Sat Oct 28, 2006 11:16 pm
Location: Texas
Contact:

Re: Captcha testing and advice

Post by stutteringp0et » Thu Mar 13, 2025 11:21 pm

If y'all don't mind - a review in the JED would be amazing!

User avatar
stutteringp0et
Joomla! Ace
Joomla! Ace
Posts: 1482
Joined: Sat Oct 28, 2006 11:16 pm
Location: Texas
Contact:

Re: Captcha testing and advice

Post by stutteringp0et » Fri Mar 14, 2025 11:17 pm

new feature added today - the captcha can alter the standard joomla forms (contact, user registration, user forgot password, and user forgot username), adding a busy spinner and loading message to the submit button until the captcha hash has been solved. Some visual feedback for users, and prevents them from hitting submit before the captcha calculation is complete (for the higher difficulty settings) Switch it on in the plugin settings. For forms it doesn't support, this changes nothing.

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2805
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Captcha testing and advice

Post by JAVesey » Sat Mar 15, 2025 8:55 am

stutteringp0et wrote: Fri Mar 14, 2025 11:17 pm new feature added today - the captcha can alter the standard joomla forms (contact, user registration, user forgot password, and user forgot username), adding a busy spinner and loading message to the submit button until the captcha hash has been solved. Some visual feedback for users, and prevents them from hitting submit before the captcha calculation is complete (for the higher difficulty settings) Switch it on in the plugin settings. For forms it doesn't support, this changes nothing.
Very many thanks Michael; v5.2.17 downloaded (not yet showing on update system for me). Will install shortly.

Will leave a review in JED today, too :)
John V
Cardiff, Wales, UK
Joomla 5.3.0 "live" site on PHP 8.3.16 and MariaDB 10.11.10 (with b/c plugin enabled)
Joomla 5.3.0 on MAMP Pro 7.2.3 with PHP 8.3.14 and MySQL 8.0.40 (with b/c plugin enabled)

User avatar
stutteringp0et
Joomla! Ace
Joomla! Ace
Posts: 1482
Joined: Sat Oct 28, 2006 11:16 pm
Location: Texas
Contact:

Re: Captcha testing and advice

Post by stutteringp0et » Sat Mar 15, 2025 5:01 pm

Yeah, I have my XML update files refreshing every 24 hours at midnight (part of my caching strategy to control CPU usage and bandwidth) and I pushed the update after the cutoff. It'll show up tonight.

edit: thanks for the glowing review - I just saw it!

Advertisement

Post Reply

Return to “Extensions for Joomla! 5.x”