Author: Anthony M

  • How to validate registrations using CleanTalk API with BVScript

    How to validate registrations using CleanTalk API with BVScript

    Lately, we sometimes get questions like “The code samples on GitHub are written in C#, they don’t seem to convert to VB. Do you have any code sample for visual basic ?”

    The good news is that now we have! The project below demonstrates how to use the Cleantalk API with VBScript to validate registrations. Feel free to ask any questions – we’re here to help.

    Requirements

    1. Register a Cleantalk account https://cleantalk.org/register?product=anti-spam
    2. Obtain the access key from the CleanTalk account https://cleantalk.org/help/add-website

    Usage

    1. Place the code of Cleantalk class in your VBScript file.

    VB
     ```vbscript
     Class CleantalkClass
         Private auth_key
         Private check_message
         Private user_email
         Private user_ip
         Private user_name
         Private user_js_state
         Private user_submit_time
         Private form_event_token
         Private response
         Private verdict
         Private codes
         Private comment
         ... other class code
         ... other class code
       else
            validateResponse = false
       end if
         end function
      
      end class
     ```

    2. Initialize the Cleantalk class instance, use your own access key when instantiating.

    VB
    Dim Cleantalk : Set Cleantalk = (New CleantalkClass)("your_access_key", "check_newuser")

    3. Set user data when the logic is ready to check the user.

    VBst********@*****le.com") Cleantalk.setUserIP("10.10.10.10") Cleantalk.setUserName("John Doe") Cleantalk.setUserJSState("1") Cleantalk.setUserSubmitTime("5") Cleantalk.setFormEventToken("a_32_symbols_event_token_value")” style=”color:#adbac7;display:none” aria-label=”Copy” class=”code-block-pro-copy-button”>
    Cleantalk.setUserEmail("st********@*****le.com")
    Cleantalk.setUserIP("10.10.10.10")
    Cleantalk.setUserName("John Doe")
    Cleantalk.setUserJSState("1")
    Cleantalk.setUserSubmitTime("5")
    Cleantalk.setFormEventToken("a_32_symbols_event_token_value")

    4. Send request to the API.

    VB
    Send request to the API:

    5. Validate the response.

    VB
    If Cleantalk.validateResponse Then
        If Cleantalk.getVerdict = 1 Then
            WScript.Echo "Validation success. User is allowed."
        Else
            WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment
        End If
    Else
        WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment
    End If

    Important! Do validation every time after response gathering.

    Functions

    • setUserEmail(email)
    • setUserIP(ip)
    • setUserName(name)
    • setUserJSState(jsState)
    • setUserSubmitTime(submitTime)
    • setFormEventToken(eventToken)
    • sendRequest()
    • validateResponse()
    • getVerdict()
    • getCodes()
    • getComment()

    Example

    VBus**@*****le.com") Cleantalk.setUserIP("192.168.1.1") Cleantalk.setUserName("John Doe") Cleantalk.setUserJSState("0") Cleantalk.setUserSubmitTime("0") Cleantalk.setFormEventToken("your_event_token") Cleantalk.sendRequest If Cleantalk.validateResponse Then If Cleantalk.getVerdict = 1 Then WScript.Echo "Validation success. User is allowed." Else WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment End If Else WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment End If” style=”color:#adbac7;display:none” aria-label=”Copy” class=”code-block-pro-copy-button”>
    Dim Cleantalk : Set Cleantalk = (New CleantalkClass)("your_auth_key", "check_message")
    
    Cleantalk.setUserEmail("us**@*****le.com")
    Cleantalk.setUserIP("192.168.1.1")
    Cleantalk.setUserName("John Doe")
    Cleantalk.setUserJSState("0")
    Cleantalk.setUserSubmitTime("0")
    Cleantalk.setFormEventToken("your_event_token")
    
    Cleantalk.sendRequest
    
    If Cleantalk.validateResponse Then
        If Cleantalk.getVerdict = 1 Then
            WScript.Echo "Validation success. User is allowed."
        Else
            WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment
        End If
    Else
        WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment
    End If

    Implementing of BotDetector JavaScript library

    To use the BotDetector JavaScript library, you need to include the script in the HTML of the page.

    VB
    <script src="https://moderate.cleantalk.org/ct-bot-detector-wrapper.js"></script>

    This script will automatically detect the form submission event and send the data to the Cleantalk API.

    Please note, that the script does not perform any checks, just sends the user’s frontend data (like JavaScirpt state, mouse position etc.) to the API.

    Example

    VB
    <!DOCTYPE html>
    <html lang="en">
       <head>
       <meta charset="UTF-8">
       <title>Register</title>
       <!--Bot-detector JS library wrapper. This script must be added to the HTML of the page.-->
       <script src="https://moderate.cleantalk.org/ct-bot-detector-wrapper.js"></script>
    </head>
    <body>
       <form method="post" action="your_form_handler_script">
          <label for="user_name">User name</label>
          <label for="user_email">User email</label>
          <input type="text" name="user_name" id="search_field" /> <br />
          <input type="text" name="user_email" id="search_field" /> <br />
          <input type="submit" />
       </form>
    </body>
    </html>

    When you got added the script, the form will be updated with hidden event_token field after the script loaded. This field value you should transfer to VB Script

    Once the token is provided in the API request, the VB Script will make the API takes in count the frontend data.

    Make note, that data provided on event_token have the higher priority than the data set by optional VB Script setters.

  • Brave forms spam protection for WordPress

    Brave forms spam protection for WordPress

    CleanTalk added spam protection for Brave Forms using direct form integration. So in case, you prefer using this type of forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Brave Forms but also many others.

    Download CleanTalk Anti-Spam plugin | Download Brave Builder 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Contact Forms from spam.

    How to check Brave Forms Spam Protection

    You can test the work of Anti-Spam protection for your Contact Forms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form. After submitting the form, you will see a block message about the block on the form submission.

    brave
    brave

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your Contact Forms from spam in 5 minutes

    Update

    The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • New Customization for Email Encoder Phrases in CleanTalk Anti-Spam

    New Customization for Email Encoder Phrases in CleanTalk Anti-Spam

    We’re excited to introduce a new feature in CleanTalk’s Anti-Spam plugin that lets you customize the phrases used during the email encoding process. With version 6.52, you can now easily change three default phrases to better match your website’s tone:

    1. “The magic is on the way, please wait for a few seconds!”
    2. “The original one is”
    3. “Decoding the contact data, let us a few seconds to finish.”

    How It Works

    You can customize these messages by adding simple code snippets to your functions.php file. For full details on how to implement these changes, check the instructions here.

    This update makes it easier to create a more personalized experience for your users while keeping your website secure.

  • Site Reviews Spam Protection for WordPress

    Site Reviews Spam Protection for WordPress

    CleanTalk added spam protection for Site Reviews forms using direct form integration. So in case, you prefer using this type of contact forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Site Reviews Forms but also many others.

    Download CleanTalk Anti-Spam plugin | Download Site Reviews 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Contact Forms from spam.

    Create your CleanTalk account – Register now and protect your Contact Forms from spam in 5 minutes

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • Paid Membership Subscriptions spam protection in 5 minutes

    Paid Membership Subscriptions spam protection in 5 minutes

    CleanTalk added spam protection for Paid Membership Subscriptions forms using direct form integration. So in case, you prefer using this type of contact forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Paid Membership Subscriptions Forms but also many others.

    Download CleanTalk Anti-Spam plugin | Download Paid Membership Subscriptions 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Contact Forms from spam.

    How to check Paid Membership Subscriptions Forms Spam Protection

    You can test the work of Anti-Spam protection for your Contact Forms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form. After submitting the form, you will see a block message about the block on the form submission.

    screen
    screen

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your Contact Forms from spam in 5 minutes

    Update

    The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • Recaptcha v3 always returns 0.9 score – research by CleanTalk

    Recaptcha v3 always returns 0.9 score – research by CleanTalk

    Who is this article for?

    We’ve been closely following the thread https://github.com/google/recaptcha/issues/235 and noticed that, despite being closed, users continue to report issues.

    We’ve decided to investigate the problem and share our findings with you.

    • How ReCaptcha v3 works
    • What is a score
    • Why you might get a score other than 0.9 in ReCaptcha v2
    • Why you always get a score of 0.9 in ReCaptcha v3
    • Our testing process
    • How to get an accurate score in a test environment
    • CleanTalk’s solutions

    Research Objective

    Users complain that when testing ReCaptcha v3, they always receive the same score of 0.9. However, in the same environments with ReCaptcha v2, the score varies.

    What is a Score?

    The score is the result of the ReCaptcha check. The closer it is to 1, the more likely the visitor is human. The closer it is to 0, the more likely the visitor is a bot.

    How ReCaptcha v3 Works

    Note: The following findings are based on publicly available code and our interpretation.

    1. A user integrates the ReCaptcha script on a form page.
    2. A unique frontend token is added to each form.
    3. The script loads additional obfuscated code.
    4. The obfuscated code collects frontend data (a “black box” not accessible due to Google’s code obfuscation).
    5. Aggregated and encoded data + frontend token is sent to Google’s cloud to get a result token.
    6. The result token is sent to the backend of the testing environment.
    7. The backend validates the token via Google’s API, sending the backend token, result token, and the visitor’s IP address.
    8. Based on the score result, the backend environment can decide whether to allow the visitor to proceed.

    The backend environment decides whether to allow the visitor to proceed based on the score.

    We believe ReCaptcha v3 relies on machine learning based on the traffic environment. The exact decision-making algorithms are proprietary and remain a trade secret of Google.

    Why You Get Score <> 0.9 in ReCaptcha v2

    ReCaptcha v2 does not use machine learning for decision-making.
    It operates in one of two modes:

    1. in the user interaction mode (presence of click-the-flag mechanism on the page).
    2. In silent mode (reCaptcha v2 badge on the page).

    The data collection and processing occur in real time, allowing for accurate, immediate results. Learn more: https://developers.google.com/recaptcha/docs/versions.

    Why You Always Get a Score = 0.9 in ReCaptcha v3:

    ReCaptcha v3 relies on machine learning based on traffic data.
    A consistent score of 0.9 indicates the system lacks sufficient data about your typical traffic to make an accurate decision. To avoid false positives, the system grants a 0.9 score to all visitors until trained.

    Our Testing Process

    Test Environment

    • A PHP website running WordPress 6.2.
    • ReCaptcha v3 integrated according to instructions.

    Bot

    A simple bot created in Python using Selenium.

    The bot was run from three IP addresses, emulating the following parameters

    • headless
    • user agents
    • headers
    • clicks
    • form submissions

    Process

    The bot ran for 24 hours, performing sequential visits and form submissions with random parameters.

    No live traffic was sent to the site.

    Results

    • All bot requests returned a score of 0.9.
    • The score did not change over time.
    • No statistics appeared in Google Analytics.
      We hypothesize that traffic presence, volume, and quality in Google Analytics may act as a training marker for the ReCaptcha system.

    How to Get an Accurate Score in a Test Environment

    The recaptcha v3 model assumes long-lasting training on live traffic.

    This means that the test environment must be loaded in the same way as the production environment. Which will undoubtedly cause some difficulties in deploying such an environment and getting the payload.

    We believe that to get the right score a user will have to turn to testing in a productive environment.

    However, the policy of most companies we know of (including CleanTalk of course) restricts any testing in a production environment.

    Unfortunately, we couldn’t find specific terms for the duration of training in Google’s official documentation. We believe that the duration of training depends on the following parameters:

    • Traffic load
    • Ratio of bots to real users
    • Percentage of “intelligent” bots among total bot traffic

    Without live traffic, no settings or configurations will yield an accurate score in a test environment.

    CleanTalk’s Solutions

    CleanTalk Check Bot

    • Decisions are made online without machine learning.
    • Simpler integration—no need to manually add tokens to forms.
    • Extensive documentation available: GitHub CleanTalk API
    • Immediate and relevant testing results.
    • Technical support response within 24 hours.

    Anti-Spam SAAS for CMS

    CleanTalk provides a cloud-based anti-spam service for websites, blocking spam in real time without CAPTCHAs. It integrates with CMS platforms like WordPress and Joomla, securing comments, registrations, and contact forms. Features include SpamFireWall to block spambots, email validation, and detailed logs, ensuring seamless protection and improved user experience.

    Anti-Spam CleanTalk API

    CleanTalk offers a suite of APIs that integrate anti-spam functionalities into various applications. The Anti-Spam API includes methods like

    • check_newuser() for registration checks;
    • check_message() for evaluating comments and contact form submissions;
    • send_feedback() for moderator inputs.

    The Database (Blacklists) API provides

    • spam_check() to verify IP and email records against CleanTalk’s database;
    • backlinks_check() to detect domains associated with spam;
    • the ip_info() method returns country codes for IP addresses.

    For managing personal lists and uptime monitoring, the Dashboard API offers dedicated methods. These APIs enable developers to enhance their applications’ security and spam prevention capabilities effectively.

  • Malware Auto-Cure Update: Enhanced Threat Treatment and Logging

    Malware Auto-Cure Update: Enhanced Threat Treatment and Logging

    The latest update to Malware Auto-Cure System in the CleanTalk Security Plugin introduces significant improvements in threat detection and remediation, ensuring a more effective and reliable security solution.

    • Fixed the treatment process when a file may contain multiple threats.
    • Fixed the treatment process when a file can only be partially cured.
    • Added detailed logging of automatic treatment results.
    • Added responses to the initiation of manual treatment.
    • Fixed an issue where a file could never be treated due to missing instructions. Now, if an instruction becomes available after a failed treatment attempt, the treatment will succeed.

    The update strengthens our commitment to proactive cybersecurity, reducing infection persistence and ensuring a higher success rate in malware remediation.

  • FiboSearch Spam Protection

    FiboSearch Spam Protection

    CleanTalk added spam protection for FiboSearch Search Forms for WooCommerce in the CleanTalk Anti-Spam plugin using direct form integration. So in case, you prefer using search forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be FiboSearch but also many others.

    Download CleanTalk Anti-Spam plugin | Download FiboSearch 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your FiboSearch from spam.

    banner 1544x500

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your Contact Forms from spam in 5 minutes

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedback, contacts and reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • Our client’s review: NANIROSSI.IT

    Our client’s review: NANIROSSI.IT

    We continue sharing our clients’ reviews and today’s great review is kindly brought to you by Matteo Mazzei from nanirossi.it on Trustpilot.

    usefull and simply to install WP plugin

    Screenshot 2025 02 03 172042
    Screenshot 2025 02 03 172042
  • Our client’s review: UPWITHDOWN.BG

    Our client’s review: UPWITHDOWN.BG

    We continue sharing our clients’ reviews and today’s great review is kindly brought to you by Borislav from upwithdown.bg on WordPress.

    Perfect!

    I tested so many plugins to stop spam registrations but only CleanTalk worked!!!

    Just install it and spam stopped immediately.

    Thank you so much!!!

    2024 12 16 14 29 57