Thanks for the info, @joneiseman – if there’s no other way i’ll probably have to look into that option. just sorted through 498 bookings, 2 were real.
@ogelbrich if you open a support request, we (CleanTalk team) will do our best to figure out your case https://cleantalk.org/my/support/open
Thanks for your kind offer, @shagimuratov – but after getting more than 1200 bookings in less than 30 mins, I worked out a solution myself in the meantime. maybe this helps someone else, too:
I’m using Events Manager’s Phone field ‘dbem_phone’ as a honey trap – i hid it using CSS and added this code snippet to functions.php (or you can use any code snippet plugin to insert this):
add_filter('em_booking_validate', 'block_booking_if_phone_filled', 10, 2);
function block_booking_if_phone_filled($result, $EM_Booking) {
// Check the field 'dbem_phone'
if (isset($_POST['dbem_phone']) && trim($_POST['dbem_phone']) !== '') {
$EM_Booking->add_error('Actually, you shouldnt even see the field for phone - unless youre a spam bot – Hmm.');
return false; // block booking
}
return $result;
}
this script checks if the input field for phone number ‘dbem_phone’ is empty or not – if it isn’t, the booking gets blocked. since human users can’t even see the field and would leave it empty, only bots get blocked. this works fine for me at the moment – spam bookings have stopped dead.
yay, i guess.
adding a honeypot should maybe be a standard feature of future events manager forms?
fyi @joneiseman
@ogelbrich thank you for the feedback and sharing the solution! Anyway, we are going to retest protection for Event manager and release an update if anything works wrong.
I am having a similar problem but the bookings appear to be something generated by the bookings function itself. Every time I view the bookings more bogus bookings appear but they contain strange data. The name field is selected from the first name field of some random actual user. Same for email address randomly selected from list of actual users. The phone number is always something from a foreign country. I delete them but they again start appearing almost immediately. Is this something inadvertently introduced in the latest release, 6.6.4.4? If it is not something that can be fixed soon, I will resort to Oliver Gelbrich’s workaround.
The honeypott With Phonenumber was a good idea, but I’ve got the first spams with a phonenumber. is there no way für captchas?
Regards
I think the phone number was a hidden field so only bots would fill it out.
okay, i understand.
i changed the code of the Plugin and it seems to work.
Many Thanks!