FrontendForms - A module for creating and validating forms on the frontend

[Juergen]

Hello  @ngrmm

I am sorry, but this does not work out of the box,  but if you want to display a default image if no image was uploaded, you can do it the way as explained here:

https://processwire.com/talk/topic/18761-solved-when-default-field-value-is-an-image-file/?do=findComment&comment=163685

Best regards

[ngrmm]

thanks @Juergen for the quick response!
Maybe I'll try this: integrating existing images as multi-checkboxes. And an upload field for the new ones.

[marie.mdna]

Hi @Juergen, first of all, thanks for the module, it seems to be a time savior !

I now have a (probably very dumb) question, I've tried to use your code from "Create the first form" in your documentation. It worked nicely and as expected. However I left my computer and when I came back I refreshed my localhost page, got an error message mentioning that the amount of time for submitting the form had been way too long and that it could be bot behavior. My bad on this... The thing is that now I can't seem to be able to render the form anymore. Any idea on how to allow myself to keep working/discovering your module?

Best,

[Juergen]

Hello @marie.mdna

Glad to hear that you are using the module. ?

What you are describing is a security feature (especially for SPAM bots). Refreshing the page does not help, because a session to prevent the form display is active. You have to close all browser windows to delete the session. Afterwards the form will be displayed again.

This security feature is enabled by default, but you can disable it if you want. You only have to set the max time value to 0. You will find more information here.

You can change the setting inside the module configuration or on per form base inside the template. By default a value of 1 hour is set as max time, but you can set a higher number or 0 to suppress the measurement of the time.

Hope this helps!

Best regards

[herr rilke]

hello jürgen,

thanks a lot for your work!

while getting 5 spam mails during the first 12 hours of having my form online (even using honey pot option) i decided to enable a captcha. but that doesn't show!

PHP 8.1.22
processwire 3.0.224
frontendforms 3.1.45

phpinfo():

GD Support 	enabled
GD headers Version 	2.3.0
GD library Version 	2.3.0
FreeType Support 	enabled
FreeType Linkage 	with freetype
GIF Read Support 	enabled
GIF Create Support 	enabled
JPEG Support 	enabled
PNG Support 	enabled
WBMP Support 	enabled
XPM Support 	enabled
XBM Support 	enabled
WebP Support 	enabled
BMP Support 	enabled
TGA Read Support 	enabled
Directive	Local Value	Master Value
gd.jpeg_ignore_warning	1	1

the HTML output is:

<div class="form-control captcha" id="contact-captcha-inputwrapper">
  <div class="image-wrapper">
    <img class="captcha" alt="Captcha" src="/captchaimage.php?formID=contact&amp;cat=text&amp;type=SimpleMathTextCaptcha" id="contact-captcha-image"></div>
  <div class="reload-link-wrapper">
    <a class="reload" href="#" title="Click to load a new captcha" id="contact-reload-link" onclick="reloadCaptcha('contact-captcha-image', event)">Reload image</a>
  </div><input id="contact-captcha" name="contact-captcha" type="text" class="input" required="">
</div>

any idea?

edit: an error 500 is reported for captchaimage.php

 

[herr rilke]

other question: h

ow can CSRF be implemented in the form?c

any help is apreciated

[Juergen]

39 minutes ago, herr rilke said:

other question: h

ow can CSRF be implemented in the form?c

any help is apreciated

Hello herr rilke. CSRF is implemented by default using the Processwire CSRF API. Take a look here, so no need to inplement it by your own.

Best regards

[Juergen]

2 hours ago, herr rilke said:

edit: an error 500 is reported for captchaimage.php

Strange! On my side it works without getting an error.

Can you please check if the code in the captchaimage.php is exactly the same as the one at Github.

Best regards

[herr rilke]

thanks for your quick answer, jürgen!

more than strange: the file was not even in the directory at all!
usually i'd expected a 404 error.

is the generated path correct?

https://www.domain.de/captchaimage.php?formID=contact&cat=text&type=SimpleMathTextCaptcha

best

[Juergen]

Yes the path is correct, because the captcha image must be reachable for public viewing. If the file is not present at this place (for what reason ever) please add it manually to the root (like the index.php).

12 minutes ago, herr rilke said:

more than strange: the file was not even in the directory at all!

The file will be copied during the installation process of the module to the root directory and will be deleted afterwards from the original place under FrontendForms/Formelements/Captcha/. So this is a usual behavior ;-).

After de-installation, the file will be copied back to the original place. So it will be inside the directory again.

[herr rilke]

all right.
then it was me looking in the wrong place.

so the file's there and same as on github.

[Juergen]

Ok, before we try to find the cause, please deinstall and install the module again. Sometimes errors occur and disappear during a new install.

[herr rilke]

... nearly too easy ?

any chance to wrap the input field?
and can i translate the wording?

thanks for your patience & time, jürgen!

all the best

[Juergen]

Glad you get it working ?!!

4 minutes ago, herr rilke said:

and can i translate the wording?

Every phrase of the module is translatable. You have to do it in the admin area under (setup->languages) or in German (Verwaltung->Sprachen). If you need the German translations, you can use the language pack, that is shipped with this module and you can install all the German translations (for frontend and backend with one click).

(look for languages inside your module configuration).

13 minutes ago, herr rilke said:

any chance to wrap the input field?

Only just to be clear: Do you mean only the input field where you have to add the CAPTCHA value or the whole CAPTCHA (image and input field)?

[Juergen]

Hello herr rilke!

I have added an additional wrapper for the CAPTCHA input field, so you can style it according to your needs. You have to replace the following 2 files with the one from Github (alternatively you can also download and install a fresh copy from Github).

• AbstractTextCaptcha.php
• AbstractImageCaptcha.php

Now the following wrapper will be added:

<div class="captcha-input-wrapper">
  <input id="contact-captcha" name="contact-captcha" type="text" class="input" required="">
</div>

As you can see a new wrapper with the class "captcha-input-wrapper" will be added arround the CAPTCHA input field. Hope this helps.

Best regards

[herr rilke]

junge, wie genial!?

thanks a lot for your fast & brillant support!

as a newbie i'm impressed by a community that seems to be not to big at first sight but is quick, friendly & helpful!

 

[Juergen]

You are welcome in the world of PW!

At the beginning it is always a hazzle to learn how the system works and how you can adapt it to your needs, but in the end it is much more flexible than others CMS ?

[herr rilke]

OT: That is one main point that attracted me. I've been working with Contao for years, but it's complicated in another dimension and very error-prone in setup and update when dealing with different  customer environments. It consumes hours of my time in places I can't foresee. (but has a built in form builder ?)

[Juergen]

5 minutes ago, herr rilke said:

but has a built in form builder ?)

There is also a commercial form builder module available for Processwire, which have a UI to create the forms. This will be easier than my approach, but you have to pay for it. ?

[herr rilke]

that's why i choose your module!

[herr rilke]

hello,

does anyone have experience with this module on publicly accessible pages (i.e. not behind a login or something)? despite the honeypot, maximum failed attempts, minimum completion time and captcha, i still receive at least 3 spam emails a day.

[Juergen]

13 minutes ago, herr rilke said:

i still receive at least 3 spam emails a day.

Thats bad! Do these spam mails always come from the same sender??

The problem is that spam bots are going to get always better and better. You are using the math captcha and I know that some spam bots can solve this captcha type. They can also solve random string captchas, because they can read the content of images.

My tipp:

You have got multiple different captchas to choose - use another one like the image captcha. You can also try to increase the level of distortion lines which makes it much more difficult for spam bots to read the content behind. All captcha configuration can be done in the backend.

It will be trial and error to find the right captcha which works best.

Would be interesting if someone else struggles with spam mails by using this module.

Best regards

[herr rilke]

hi jürgen,

put that reverse wording thingy in place.

will report ?

all the best

 

 

[Juergen]

Good choice! I guess (hope) that this will put spam bots into troubles. The "every second letter" captcha should also be a difficult task to solve for spam bots, but time will tell and we will see what happens. I am already curious ?!

Good luck

[herr rilke]

here is a short update on the spam issue: the switch to reverse input of characters has brought peace: no more spam! hurray ?