search

ambethia / recaptcha

ReCaptcha helpers for ruby apps
http://github.com/ambethia/recaptcha
MIT License
1.97k stars 440 forks source link

Spambots still signing up #252

Open tansaku opened 6 years ago

tansaku commented 6 years ago

We've been using recaptcha successfully for a while, but recently I'm seeing 20 or so obviously randomly generated signups from what look like bots. Now perhaps we've installed recaptcha incorrectly - our code is all open source and you can see it here:

https://github.com/AgileVentures/WebsiteOne/blob/master/app/controllers/registrations_controller.rb#L37

we did upgrade recaptcha recently, so perhaps we introduced a security hole? Manually testing our site it seems like everything is in place:

https://www.agileventures.org/users/sign_up

Anyone have any ideas what me might be doing wrong? Or is there some security hole in the gem or in recaptcha itself that needs patching?

SymphonicJohn commented 6 years ago

Having the same problem. Did you get this solved?

tansaku commented 6 years ago

@SymphonicJohn we upgraded the recaptcha gem once and things seemed to have improved, but have gone downhill again :-(

SymphonicJohn commented 6 years ago

@tansaku In reCAPTCHA's configuration you can change the security preference. I have it turned up to 'Most secure' and now the image picker pops up for everyone when you click the 'I am not a bot button'.