Receive attacked (I guess) on form?

got only empty mail data every day / couple times in the day

Nothing just annoying

all field are required and I have checked can’t be sent by normal way

so what you guys think , let’s me know

1 Like

Hi, could you post your workflow?
Does the execution show that the fields are blank or ist there another error?
You could also filter empty responses out before triggering the mail node.

thank for reply I’ve tested it in normal way no way to send it w/o special solution
and with the normal sending it’s working fine

this is the normal way of sending I should get in my email

and also auto reply to client

not the empty one may be due to lack of any captcha supported (by native)
I should turn on under attacked on my firewall

the problem is that this is done via client side validation, I did not check the code of the node to confirm, but this is the validation that happens in the browser for the form:

				} else if (value === '') {
					errorElement.textContent = 'This field is required';
					errorElement.classList.add('error-show');
					return false;
				} 

Which means that the browser is responsible for checking if these fields are present or not.
Spambots however bypass client side validations and just submit empty data. Spam bots are a pain with public accessible forms.
If you want to play around you can open up a dev console in your browser, update that line to a return true and it would bypass the validation of the form.

You could try to enable the ignore bots option and see if that helps:

if not you have to add a check that will filter out empty submissions.

I have enabled it since it’s on production still not working

then you will have to check for empty submissions before sending the email.
Spam bots are a real pain.

yes sir I’m now turn on Cloudflare firewall let’s see if it’s the act of bot or real human

** I’ve already put if node before that but it’s seem can’t hold it

real human is still possible but it would be someone that has very very boring life. I mean I can find better things to do than using web console to bypass forms and annoy recipients with empty submissions.

Can you maybe post your workflow? the if node, if the content really is blank, should catch it. Maybe someone just sent lots of spaces?

no there are a lot of “Hate your competitor? Don’t worry we will take care of it” services out there and making ton of money , I may join them soon ;D

exactly my point. These kids of bots are all over the place, you can only solve it by filtering out spammy / empty messages in the backend.
It’s always a cat and mouse game.

Also, you can add extra secuirty to your form, ie auths incase they spam the url, but if your inside cloudflare alot should be avoid, maybe on front end put it behind a turnstile Overview · Cloudflare Turnstile docs

Hope this helps, further.

Samuel