Still receiving spam even Google reCaptcha v3 enabled in PhpMailer Contact Form

Question

We are using below code for my PhpMailer Contact Form. and, It is working fine normally. but, I'm still receiving spam even though I have recaptcha v3 enabled.

Screenshot of spam email:

Said this one of my friend:

bots send POST requests to /php/mail.php and the email get sent even if they the request doesn’t come from my domain and didn’t pass reCAPTCHA.

Can you please any help. Is there a mistake in the code below?

HTML Form Code:


              
                What is Your Name:
                
              
              
                Your Email Address:
                
              
              
                How can I Help you?:

Bottom of the HTML page:

JS Code:

var form = $('#contact-form'); // contact form
var submit = $('#submit-btn'); // submit button

// form submit event
form.on('submit', function (e) {
    e.preventDefault(); // prevent default form submit

    if (typeof $('#google-recaptcha-v3').val() != "undefined") {
        grecaptcha.ready(function () {
            var site_key = $('#google-recaptcha-v3').attr('src').split("render=")[1];
            grecaptcha.execute(site_key, {action: 'contact'}).then(function (token) {
                var gdata = form.serialize() + '&g-recaptcha-response=' + token;
                $.ajax({
                    url: 'php/mail.php',  // form action url
                    type: 'POST',         // form submit method get/post
                    dataType: 'json',     // request type html/json/xml
                    data: gdata,          // serialize form data
                    beforeSend: function () {
                        submit.attr("disabled", "disabled");
                        var loadingText = 'Sending.....'; // change submit button text
                        if (submit.html() !== loadingText) {
                            submit.data('original-text', submit.html());
                            submit.html(loadingText);
                        }
                    },
                    success: function (data) {
                        submit.before(data.Message).fadeIn("slow"); // fade in response data 
                        submit.html(submit.data('original-text'));// reset submit button text
                        submit.removeAttr("disabled", "disabled");
                        if (data.response == 'success') {
                            form.trigger('reset'); // reset form
                        }
                        setTimeout(function () {
                            $('.alert-dismissible').fadeOut('slow', function(){
                                $(this).remove();
                            });
                        }, 3000);
                    },
                    error: function (e) {
                        console.log(e)
                    }
                });
            });
        });
    } else {
        $.ajax({
            url: 'php/mail.php', // form action url
            type: 'POST', // form submit method get/post
            dataType: 'json', // request type html/json/xml
            data: form.serialize(), // serialize form data
            beforeSend: function () {
                submit.attr("disabled", "disabled");
                var loadingText = 'Sending.....'; // change submit button text
                if (submit.html() !== loadingText) {
                    submit.data('original-text', submit.html());
                    submit.html(loadingText);
                }
            },
            success: function (data) {
                submit.before(data.Message).fadeIn("slow"); // fade in response data 
                submit.html(submit.data('original-text'));// reset submit button text
                submit.removeAttr("disabled", "disabled");
                if (data.response == 'success') {
                    form.trigger('reset'); // reset form
                }
                setTimeout(function () {
                    $('.alert-dismissible').fadeOut('slow', function(){
                        $(this).remove();
                    });
                }, 3000);
                if (typeof $('#recaptcha-v2').val() != "undefined") {
                    grecaptcha.reset(); // reset reCaptcha
                }
            },
            error: function (e) {
                console.log(e)
            }
        });
    }
});

PHP Code: (mail.php)

AddAddress($toEmail);
    $mail->setFrom($fromEmail, $fromName);
    $mail->addReplyTo($_POST['email'], $_POST['name']);

    $mail->isHTML(true);
    $mail->CharSet = 'UTF-8';
    
    $mail->Subject = $subject . ' [' . $_POST['name'] . ']';

    $mail->Body = '
                        
                            
                                
                                    
                                        Name:
                                        ' . $_POST['name'] . '
                                    
                                    
                                        Email:
                                        ' . $_POST['email'] . '
                                    
                                    
                                        Message:
                                        ' . $_POST['form-message'] . '
                                    
                                
                            
                        
                    ';
    
    /*-------------------------------------------------
        reCaptcha
    ---------------------------------------------------*/
    $message = array(
        'recaptcha_invalid' => 'Captcha not Validated! Please Try Again!',
        'recaptcha_error' => 'Captcha not Submitted! Please Try Again.'
    );
    $message_form = !empty($_POST['message']) ? $_POST['message'] : array();
    $message['recaptcha_invalid'] = !empty($message_form['recaptcha_invalid']) ? $message_form['recaptcha_invalid'] : $message['recaptcha_invalid'];
    $message['recaptcha_error'] = !empty($message_form['recaptcha_error']) ? $message_form['recaptcha_error'] : $message['recaptcha_error'];

    if (isset($_POST['g-recaptcha-response'])) {
        $recaptcha_data = array(
            'secret' => $recaptcha_secret,
            'response' => $_POST['g-recaptcha-response']
        );

        $recap_verify = curl_init();
        curl_setopt($recap_verify, CURLOPT_URL, "https://www.google.com/recaptcha/api/siteverify");
        curl_setopt($recap_verify, CURLOPT_POST, true);
        curl_setopt($recap_verify, CURLOPT_POSTFIELDS, http_build_query($recaptcha_data));
        curl_setopt($recap_verify, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($recap_verify, CURLOPT_RETURNTRANSFER, true);
        $recap_response = curl_exec($recap_verify);
        $g_response = json_decode($recap_response);

        if ($g_response->success !== true) {
            echo json_encode(array('response' => 'error', 'Message' => ' ' . $message['recaptcha_invalid'] . ''));
            exit;
        }
    }

    $forcerecap = (!empty($_POST['force_recaptcha']) && $_POST['force_recaptcha'] != 'false' ) ? true : false;
    if (isset($g_response->action) && $g_response->action == 'contact') {
        if (isset($g_response->success) && $g_response->success == true && $g_response->action == 'contact') {
            
        } else if ($forcerecap) {
            if (!isset($_POST['g-recaptcha-response'])) {
                echo json_encode(array('response' => 'error', 'Message' => ' ' . $message['recaptcha_error'] . ''));
                exit;
            }
        } else {
            echo json_encode(array('response' => 'error', 'Message' => ' ' . $message['recaptcha_error'] . ''));
            exit;
        }
    }
    //----- reCaptcha End -----//

    $success = "Thank you for contacting us and will be in touch with you very soon."; // Success Message

    try {
        $resp = $mail->send();
        echo json_encode(array('response' => 'success', 'Message' => ' ' . $success . ' '));
        exit;
    } catch (Exception $e) {
        echo json_encode(array('response' => 'error', 'Message' => ' Message could not be sent: ' . $e->errorMessage() . ''));
        exit;
    } catch (\Exception $e) {
        echo json_encode(array('response' => 'error', 'Message' => ' Message could not be sent: ' . $e->getMessage() . ''));
        exit;
    }
} else {
    echo json_encode(array('response' => 'error', 'Message' => ' There is a invalid Receivers Email address! '));
    exit;
}
} else {
    echo json_encode(array('response' => 'error', 'Message' => ' There is a problem with the document! '));
    exit;
}
?>

Still receiving spam even Google reCaptcha v3 enabled in PhpMailer Contact Form

Answers (1)

Related Questions