Whither CAPTCHA, Enter CFFormProtect

We've been looking to replace, or least offer an alternative to, the current CAPTCHA in Mura. After some research, we've decided to use Jake Munson's excellent CFFormProtect

You can find a complete description of the project at RIA Forge using the link above, but here are a few reasons we chose to include it in Mura CMS:

  • Fully Accessible
  • Invisible to Users
  • Goes beyond simply requiring human form submission providing tests for multiple URL submission, mouse movement, keyboard use, timed submission, and keywords.
  • Easily Configurable
  • Support for Akismet and Project Honey Pot

We've been using on this site and a couple client sites and it's been a real lifesaver.

How to use CFFormProtect in Mura

CFFormProtect is already a part of public-facing system forms in Mura, but if you want to add it to a form created in the Forms Manager, here's how:

  1. Create a form in the Forms Manager.
  2. In between the opening and closing <form> tags, enter this code:

    [mura ]dspInclude('display_objects/dsp_form_protect.cfm')[/mura ]
    Note: Don't forget to remove the spaces after the "mura" but before the closing "]"
  3. Save the form and add it to a page.
  4. Configure your settings here: /requirements/cfformprotect/cffp.ini. Documentation for configuration can be found here: /requirements/cfformprotect/documentation.html
  5. If you would like to use the Honey Pot project with CFForm Protect, you can get an API key here, after you've registered.

This is available with Mura version 5.1.530.



I do not see /requirements/cfformprotect/ folder... is it incliuded a newer version of Mura or something?

July 28, 2009, 11:03 AM
Flag as Spam
Matt Levine

Yes, it's in the latest download.

August 1, 2009, 8:34 AM
Flag as Spam
Dan Vega

Every time I think It would really be nice if Mura could do 'x' out of the does! Great little feature that will save people from a ton of spam!

August 10, 2009, 1:51 AM
Flag as Spam
Mary Jo Sminkey

This is great news! I am a huge fan of CFFormProtect (and detest captchas!) so really glad to see this being used in Mura now.

August 23, 2009, 9:17 AM
Flag as Spam
Paolo Broccardo

Has anyone used cfformprotect with fusebox successfully? (Not in Mura)

I ran a test last night via two sites with CFFP - via a simple webpage and via an existing application using fusebox.

The results differered when the same spam terms were entered.

Also - I found the results very unreliable. If I added the word "viagra" to a text box, sometimes it would flag it as spam, and other times not.

It should ALWAYS have flagged it as spam as I set the points for words such as "viagra" to 4, which means on keywords alone the script SHOULD have failed.

Has anyone tested CFFP this thoroughly?



October 9, 2009, 6:34 AM
Flag as Spam

Can this be added to the comment forms on the blog pages ?

I have just installed the merced theme so really just going by what this does ATM, haven't yet looked into customising.

October 7, 2013, 3:09 AM
Flag as Spam

ok I have Mura 6.x and I can see cfformprotect is built in, and I can see in the comments templates it checks if cfformprotect is enabled.

But how do you enable it, I cannot see any settings anywhere in the admin.

October 7, 2013, 4:42 AM
Flag as Spam

nevermind, I worked out it is enabled by default, I just wasn't triggering entering enough spammyness to trigger it

October 7, 2013, 5:01 AM
Flag as Spam
Post a Comment

Required Field