WooPress v5.0 Google captcha on Register form not working properly

This topic has 8 replies, 2 voices, and was last updated 4 years, 7 months ago ago by Olga Barlow

  • Avatar: marth123
    marth123
    Participant
    July 30, 2019 at 16:00

    Hello

    My site got hit by so many of register bot that my email provider is temporary blocking my email. Even if I unblock it, I would soon got blocked again in 1-2 days. So I just install new WooPress v5 which come with Google captcha hoping to solve the problem. I already set the Site key and Secret key for the captcha and the captcha is properly shown in the Register form. However, I still get hit by lots of bot as I got email about user register nearly every minutes.

    So I go to my Google captcha account and I see this error message

    “We detected that your site is not verifying reCAPTCHA solutions. This is required for the proper use of reCAPTCHA on your site. Please see our developer site for more information.”

    So I follow the link which take me to this page
    https://developers.google.com/recaptcha/docs/verify#api-request

    But I have no idea how to apply as it is too technical.

    regards
    Thanapon

    Please, contact administrator
    for this information.
    7 Answers
    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    July 30, 2019 at 16:22

    Hello,

    1) Could you, please, provide us with screenshot of the reCaptcha settings http://prntscr.com/om1yji
    2) Do you use any CDN service or server caching of the scripts?
    3) Provide us with Dashboard and FTP access to your site to check the problem in more details.

    Regards

    Avatar: marth123
    marth123
    Participant
    July 30, 2019 at 17:03

    Hello Olga,

    I host my website with Flywheel and I have use their CDN service and caching but I don’t know in detail what they do.

    I have provided the screenshot and dashboard username and password in the private content area.

    regards

    Please contact administrator
    for this information.
    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    July 31, 2019 at 08:15

    Hello,

    We need FTP and won’t be able to check the problem without it. We had flywheel account in the past but it was removed. Give us some time to restore it.
    Meanwhile, try to install WPS Hide Login plugin to protect the default WP register/login page and check if you still get the spam registration after that. Let me know about results.

    Regards

    Avatar: marth123
    marth123
    Participant
    August 1, 2019 at 09:58

    Hello Olga,

    I have no idea how but the problem is gone now. I activated the option ‘Any one can Register’ in WooCommerce setting to enable the Register form in my website.Then I installed the plugin WPS Hide Login and change the login url and notice the bot is stop registering. So I tried to disable the WPS Hide Login plugin and the bot is still not attacking. My guess is that Google captcha is working but it needs 12 – 24 hours before it fully activate?

    regards
    Thanapon

    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    August 1, 2019 at 11:37

    Hello,

    Great. I’m very glad to hear that. Feel free to contact us in case you need any other help.

    Regards

    Avatar: marth123
    marth123
    Participant
    August 3, 2019 at 11:25

    Hello Olga,

    It seems the problem is not solved yet as I got attacked by bot again after I disable the WPS Hide Login plugin for about 10 hours. So I activated the WPS Hide Login plugin, change the login url and the bot problem is stopped. It has been about 1 – 2 days and still no bot so the plugin is working.

    I have put the FTP login info in the private content area.

    regards
    Thanapon

    Please contact administrator
    for this information.
    Avatar: Olga Barlow
    Olga Barlow
    Support staff
    August 5, 2019 at 08:08

    Hello,

    If that plugin helps you it means that the problem is not related to our theme. Probably there is some vulnerability in the default WP login page because you are not the one who has this issue https://wordpress.org/support/topic/how-to-stop-so-many-spam-new-user-registration/
    So, I just would recommend you to keep the plugin enabled to prevent spamming.

    Regards

  • Viewing 8 results - 1 through 8 (of 8 total)

You must be logged in to reply to this topic.Log in/Sign up

We're using our own and third-party cookies to improve your experience and our website. Keep on browsing to accept our cookie policy.