reCaptcha V2 is not validating

Hello Jeroen,

In this situation, we would like to find the cause in Visforms and fix the error.

I have created an issue for development in the bug list:
Issue [VF-1377] Forum: Bug-Fix: reCaptcha V2 is not validating
When we release the bug fix, you will be explicitly informed about the release here in the topic.

To do this, we need to debug the Visforms code.
Administrative access to the backend is not sufficient in this case.

The question is whether you could provide us with an Akeeba backup of the website for debugging.
We use the following platform for this: wetransfer.com/
Use the forum's email address as the recipient: forum (--at--) vi-solutions.de.

Best regards, Ingmar

Hello Jeroen,

thanks for the Akeeba backup.
We have downloaded it and will debug the situation very soon.
I will let you know when we have found out more.

Best regards, Ingmar

Hello Jeroen,

after you added our test domain to your Google reCAPTCHA v2 checkbox key pair, this reCAPTCHA also worked perfectly in Visforms.

The three update links from the Joomla Update Manager also work perfectly in your Joomla instance (your other topic in the forum).

We were very motivated to find the error with the possibility of debugging your Joomla instance in the source code.
Unfortunately, there is no 'easy' error to fix because everything works as expected and without errors.
By the way, fixing a 'easy' error would also involve the least amount of effort for us.

Conclusion:

It must be the connection to the Internet.
Address this to the provider and possibly to a previous administrator of the site if there was a predecessor for you.

What comes to mind:

It looks to me that everything 'old' gets onto the Internet without errors.
It seems as if everything 'new' is not getting onto the Internet because it is blocked somewhere.
Is it possible that a mechanism is active for which you have to explicitly allow 'new' links?

I noticed that your Joomla site, which is very nice by the way, is aimed at underage children.
Is it possible that blocking Internet access for all 'new' links could have something to do with child protection.
Is it possible that a positive opt-in mechanism is active for which you have to explicitly select and allow 'new' links?

Best wishes, Ingmar

Hello Ingmar,

I, again, asked whether the provider blocks anything but this is not te case. I am the administrator from the very beginning of our site, so I'm sure there are no restrictions of any kind. Also, the "old" Breezing form (see previous post) is working fine with the same reCaptcha.

Best regards,
Jeroen

Hello Ingmar,

Do you have an update on the reCaptcha issue? I really would like to implement your forms in our website, also because crosstec (Breezingforms) is starting to fall apart.
However I want a solid protection to prevent as much spam as possible to our volunteers receiving the forms.

Hello Jeroen,

We're working on it, and the current status is described below.

Your provider wrote:
We couldn't do this before because vi-solutions had indeed blocked 185.41.124.157

Unfortunately, they didn't include the route tracking to vi-solutions.de.
This would have allowed us to actually see where the request reached and where it was blocked.

It's not yet clear whether vi-solutions is actually blocking (provider request is in progress).
If vi-solutions isn't blocking, it's still unclear who is actually blocking.

My guesses (without certainty):
- Our provider, and therefore our server, aren't blocking the IPs.
- Your provider's server's IPs are being blocked elsewhere, for whatever reason.
- Access from your server to the Google domain in the context of ReCaptcha and Visforms is also affected:
  For example, the ReCaptcha request by Visforms from your server to Google.

Status:
- We have a support ticket pending with our provider regarding an active blocking of IP addresses within their jurisdiction.
- A response from our provider is still pending.
- We are currently reviewing the code and comparing it with BreezingForms.
- Why BreezingForms still works doesn't fit the picture.
  Visforms essentially does the same thing as BreezingForms.

Suggestion:
Can you at least temporarily use a different captcha method in Visforms?
Visforms offers several alternatives, including hCaptcha.

Best regards, Ingmar