Junk Customers

[Nick]

Viscott You can change the action on the form to ICST and the form will still work: https://docs.miva.com/miva10/referen...ows%20customer

The ICST action is what the default Shadows template uses and that has been confirmed to work correctly.

[pmlvalerie]

lesliekirk Did you ever find out about the Empty reCAPTCHA response?

That is the only message in our log. I just implemented the module 3 days ago and when I review the reCAPTCHA log, the only response logged is Empty reCAPTCHA response. It is coming from the LOGN or EMPW actions.

Thank you in advance -
Valerie

[lesliekirk]

lesliekirk Did you ever find out about the Empty reCAPTCHA response?

That is the only message in our log. I just implemented the module 3 days ago and when I review the reCAPTCHA log, the only response logged is Empty reCAPTCHA response. It is coming from the LOGN or EMPW actions.

Thank you in advance -
Valerie

I am still lost down this rabbit hole - maybe someone can throw me (us) a carrot.

[rbuelna]

I am still lost down this rabbit hole - maybe someone can throw me (us) a carrot.

"Empty reCaptcha response"


this means that no recaptcha token was sent in the request

-Likely spam / bots



A bot or spammer could be directly calling that action from their own server, rather than loading the page / triggering the action there. If JS is disabled, then it would also do that because we use js to hook into the form and inject the recaptcha token.

Under normal circumstances, this is the flow: User view the page. Page loads and our JS finds the form data configured in the recaptcha settings. If found, it hooks the submit (overwrites it so it can make its own request and then trigger the submit). User triggers a form submit. reCAPTCHA blocks the submit, triggers the recaptcha response token generation, receives the token, inserts the token in the form as a hidden input and then triggers the original submit. In that case, the server sees the recaptcha data, makes the validation request to google, and then acts on the response.

That is the info I received a while back from one of our developers.

Let me know if that helps.

Warm Regards

[ocpxc02]

The majority of our rejections are also due to empty responses and it is affecting actual customers trying to complete orders. We get a number of calls from customers who are seeing the error message we present when reCaptcha fails during checkout. There are very few rejections due to an actual score below the configured threshold.

Paul