It looks like the forms are being submitted even if the recaptcha was not passed.
I logged some of the entries to figure out what was happening, it seems like when someone passed the recaptcha, the field [g-recaptcha-response] from WPCF7_Submission::get_instance() get_posted_data() is present, for the spammy submissions, it’s not.
I now hook into the wpcf7_before_send_mail action to ignore the submissions that don’t have this field populated. Seems pretty easy for the plugin maintainers to fix, but this works for now.
-
This reply was modified 7 years, 5 months ago by quodlibet.
