Hi, for preventing spam from gravity form i installed Add-On reCAPTCHA di Gravity Forms.
But seems like there is no server side verification, if i send the form without checking Captcha V2 the form is not send but listening on access_log i get 200.
Spammers in this case can send it with curl or postman avoiding the frontend Captcha.
Is this a bug of your addon? is there another addon that can solve this problem and correctly uses captcha?
When using the reCAPTCHA Add-On, the Captcha field should be deleted from the forms. Instead of the field, the add-on uses the v3 script, which is automatically included.
I deleted the field and enabled v3 but i still have spam from that form. Captcha score is 0.9 but it is spam. No way blocking ips or some email addresses, keeps arriving
A score of 0.9 indicates Google did not believe it to be spam. Unfortunately, their API doesn’t have a way to train it when it assigns an incorrect score.
You can find additional anti-spam solutions you can use here: