Ok, I just tried this and it works - hopefully will help a little bit more with those of you receiving spam via Formmail.
(these instructions for FutureQuest servers - otherwise you will need to install the reCaptcha perl module for other servers)
Edit your formmail.cgi file (whatever you have renamed it - make a backup just in case):
(line numbers may vary)
Look for line 1034 is blank, change it to:
use Captcha::reCAPTCHA;
Should now look like this:
package CGI::NMS::Script;
use strict;
use Captcha::reCAPTCHA;
use CGI;
use POSIX qw(locale_h strftime);
Line 2094 is blank, change it to:
$self->check_recaptcha or return;
Should now look like this:
$self->missing_fields_output(@missing);
return;
}
$self->check_recaptcha or return;
my $date = $self->date_string;
my $email = $self->get_user_email;
Insert the following two functions into the script
starting at line 2104. Replace YOUR_PRIVATE_KEY_HERE with your actual
private key from the reCaptcha folks.
2104 is just above this:
=item date_string ()
Returns a string giving the current date and time, in the configured
format.
Here is the code to insert above that:
# START additions to support reCaptcha verification
=item check_recaptcha ( )
Uses the reCaptcha perl module to CHECK the user entered words.
=cut
sub check_recaptcha {
my ($self) = @_;
use constant PRIVATE_KEY => 'YOUR_PRIVATE_KEY_HERE';
my $c = Captcha::reCAPTCHA->new;
if ( $self->{Form}{recaptcha_response_field} ) {
my $result = $c->check_answer(
PRIVATE_KEY, $ENV{'REMOTE_ADDR'},
$self->{Form}{recaptcha_challenge_field},
$self->{Form}{recaptcha_response_field}
);
if ( $result->{is_valid} ) {
return 1;
}
else {
$self->bad_recaptcha_error_page;
return 0;
}
}
else {
$self->bad_recaptcha_error_page;
return 0;
}
}
=item bad_recaptcha_error_page ()
Outputs the error page for a bad or missing reCaptcha user entry.
=cut
sub bad_recaptcha_error_page {
my ($self) = @_;
my $errhtml = <<END;
<p>
The validation word response was missing or not correct.
All test phrases are two words long so your entry should
be two words as well. The presented words are generated
automatically from a scanned book and are often hard to read.
Please use the back button in your browser to return to the form
and you will automatically have two new words. There is a small
refresh icon next to the response field that will generate two
new words if you can not read the two words presented.
</p>
END
$self->error_page( 'Error: Incorrect or Missing Challenge Words',
$errhtml );
}
# END additions to support reCaptcha verification
Don't forget to put in your private key from reCAPTCHA!
That is it for the changes to the formmail script - save it.
Now for the HTML form page.
Insert the following code just above your "Submit" button:
<script type="text/javascript"
src="http://api.recaptcha.net/challenge?k=<your_public_key>">
</script>
<noscript>
<iframe src="http://api.recaptcha.net/noscript?k=<your_public_key>"
height="300" width="500" frameborder="0"></iframe><br>
<textarea name="recaptcha_challenge_field" rows="3" cols="40">
</textarea>
<input type="hidden" name="recaptcha_response_field"
value="manual_challenge">
</noscript>
Make sure to place your matching public key in the 2 places above.
And that should do it. With these changes made to your files on the server, you should now need a valid response to the reCAPCHA to be able to submit the form.
You will receive the recaptcha_challenge_field, and the recaptcha_response_field in the email messages however, but better than getting more spam.
Special thanks to Blake Girardot for his help with this!
Any questions, let me know, I will try and help.
John