X-Cart forums

[Triple A Racing]

Today's challenge is too see if anybody has already, successfully implemented Google reCAPTCHA v3 > https://developers.google.com/recaptcha/docs/v3 within the standard XC 5 Contact Us add-on > https://market.x-cart.com/addons/contact-us.html and made it work with full functionality?

The uprated XC5 Contact Us add-on > https://market.x-cart.com/addons/advanced-contact-us-form.html is both chargeable and of absolutely zero interest to us. The same too for the Google reCAPTCHA chargeable XC 5 add-on > https://market.x-cart.com/addons/google-recaptcha.html Both are bordering on some yet more sell-a-lot-labs type profiteering nonsense and both really should be XC 5 core-inclusive items NOT additional purchase fee / annual maintenance fee attributable items.

The requirements for Google reCAPTCHA v3 to work properly are detailed in that ^^ earlier link but was wondering if anybody had already created a custom module to achieve this - before we set off to do so. @cflsystems Did check to see if you had this within your considerable, impressive set of add-ons but can't see it - yet

[cflsystems]

I don't think v3 is integrated with XC5 or 4 for that matter at all. Maybe XC will do that when Google releases v4
On a side note the new GA4 has been out for a while yet the GA module only works with Universal...

I don't really have any desire anymore to integrate any Google related services, or FB, or Twitter, or any of the other blood sucking so called "high tech", "social whatever", etc. I am happy to stay away from them and for personal as well.

[Triple A Racing]

So that's a definite no then?

Yes, we're not big Google fan etc ourselves, but no matter how many blocks / bans you put in place via Apache2 and Nginx, spammers just re-locate and thus, the Contact Us add-on is subject to abuse IF there's no other protocol check applied in the process of a message being submitted.

IF for example the Google reCAPTCHA setup was replaced by a slick @cflsystems add-on that vetted zen.spamhaus.org barracudacentral.org etc etc for SBL / CSS / XBL / PBL offenders - then that would surely be a winner would it not?

[PhilJ]

Interesting read https://www.fastcompany.com/90369697/googles-new-recaptcha-has-a-dark-side
But then we probably all knew that anyway.

[cflsystems]

Originally Posted by Triple A Racing

So that's a definite no then?

Yes. Not thinking about about doing it.


Why not use honeypot? No calls no 3rd party services, everything stays on site. With all privacy services and browsers that's available now I see more and more sites not working properly or even breaking because of all the 3rd party abusive services, tracking and what not they use.

[Triple A Racing]

Originally Posted by cflsystems

Why not use honeypot? No calls no 3rd party services, everything stays on site.

Great suggestion although (wrongly it seems now...) did think that was aimed mainly at WordPress users e.g. https://www.gravityforms.com/rip-captcha/ Will explore that further...