CI's Email.php is being exploited to push out spam...

[eluser]lc317[/eluser]
[quote author="PhilTem" date="1354324190"]Does your contact form have any mechanism of determining such abuses e.g. by using a CAPTCHA or by limiting the mails sent per hour?[/quote]


Thanks for responding...Well, I have spent the last few days trying to get ReCaptcha to work on my form, but I can't get it working. It displays fine, but it doesn't work and the user just clicks past it. The captcha is displayed on the form, but I have no clue as to what or where to add the ReCaptcha server-side key, or where to put the recaptcha code in CI's contact.php controller (which we used to push email). I don't want to setup a new DB table for CI's built-in captcha functionality, so it seemed like Recatcha was a good compromise. Experimented a bit with the Ajax implementation, and I can't get that to work either! I could realllllly use some guidance as I'm know I'm getting this close to working, thanks for any help here


I've inserted the following into my form, but unsure as to where I add this in the CI controller to actually get it to work (slightly edited here):

script type="text/javascript"
src="http://www.google.com/recaptcha/api/challenge?k=your_public_key">
/script>
noscript>
<iframe src="http://www.google.com/recaptcha/api/noscript?k=your_public_key"
height="300" width="500" frameborder="0"&gt;&lt;/iframe><br>
&lt;textarea name="recaptcha_challenge_field" rows="3" cols="40"&gt;
&lt;/textarea&gt;
&lt;input type="hidden" name="recaptcha_response_field"
value="manual_challenge"&gt;
</noscript>