Lack of interest Limit Contact Us Form to User Groups Awaiting Confirmation and higher

This suggestion has been closed automatically because it did not receive enough votes over an extended period of time. If you wish to see this, please search for an open suggestion and, if you don't find any, post a new one.

NealC

Well-known member
The Contact Us form seems to be a well known "exploit" to send spam and I'm not sure how to limit it. What I would suggest is that if someone has not registered on the forum they cannot use contact us. I was checking User Group permissions to see if this was something that could be disabled for unregistered but with the unregistered / unconfirmed sharing the same user group permissions this would not be possible.

We need a way to prevent anonymous users from using the Contact Us form but allow it for someone that may have registered but has not been able to verify their account.
 
Upvote 0
This suggestion has been closed. Votes are no longer accepted.
I know you are posting a suggestion for core Xenforo but at least in the meantime there's this:

This addon eliminates virtually all Contact Form spam on forums where I've tested it. Anything left over is human spam but interestingly enough where I've been testing or using it there hasn't been any human spam - it's all been bots.

 
Thanks for the reply but I don't get enough to warrant a $30 add-on. This is a problem with the core that needs to be addressed and hopefully XF will do so as this is a common avenue of "attack" it seems.
 
Understood. However, I would note that one problem with bot attacks is that they can bypass normal antispam measures including reCaptcha. Currently, XF doesn't support reCaptcha 3 as far as I know, and I don't know if that would be any better. It would help if you could enable Captcha or Question-and-Answer for the Contact Form but as far as I know that isn't an option. That might well at least significantly reduce Contact Form spam for many forums.
 
If we could just avoid the use of the form for anonymous users that sure would help. Awaiting confirmation is non anonymous.
 
The Contact Us form seems to be a well known "exploit" to send spam and I'm not sure how to limit it. What I would suggest is that if someone has not registered on the forum they cannot use contact us. I was checking User Group permissions to see if this was something that could be disabled for unregistered but with the unregistered / unconfirmed sharing the same user group permissions this would not be possible.

We need a way to prevent anonymous users from using the Contact Us form but allow it for someone that may have registered but has not been able to verify their account.

This will do what you need,
 
I had a couple of users use the Contact Us form to let me know that they were having registration problems that ended up being a server issue, so the only way I think I'd want the Contact Us form to be restricted for unregistered users is if there was a toggle to make that optional.
 
Back
Top Bottom