I need help getting detail on a failed verification and the spam rating is 0/5

[AstralInternet]

I've been using Mosparo for protecting some WordPress form (created with ContactForm 7) with the WordPress Mosparo integration.

Some time, some message sent (in a text box) arre failling the Mosparo verification, but I can not see why. The Spam rating is 0/5 and the verdit for is Spam is "No".

Here is an image of a failled submission that should be valid :

In text format, he is the message content :

Bonjour à vous,
J'aimerais savoir combien coûterait l'entregistrement d'un nom de domaine pour un organisme (.org). Aussi, j'aimerais savoir si je peux payer les frais avec une carte prépayée Mastercard Vanilla, car c'est toujours cela que j'utilise pour mes transactions professionnelles, je n'utilise pas ma carte personnelle. Ou je peux vous faire un virement bancaise.
Au plaisir de vous lire. Bonne journée !!! Cordialement,

---

1. Can anyone help me understand why the content of the message is being mark as not valid ?
2. Is there a way to add and exception in mosparo in order to prevent the verification of a particular field ? Or a hook in the Mosparo Plugin that would allow me to not send this particular field ?

[zepich]

Hi @AstralInternet

Thank you very much for your questions.

1. Since this looks like a valid submission (not spam), I guess it happened accidentally. There are two reasons why it can happen:
   a) If the backend (of your website) does not send a field to mosparo for verification, then the field is invalid (because mosparo cannot verify the content of the field).
   b) If the content received from the backend differs from that that mosparo received in the frontend, then the field is also invalid.

It is likely reason b) because reason a) happens only if a bad actor tries to manipulate the form. Since this looks like a normal, valid submission, I do not think this person attempted to manipulate the form. So it's most likely reason b). This is usually also more of a problem from a bad actor (for example, when a bot tries to manipulate the content of the form), but there are normal, simple reasons why it can happen — for example, white space. If the user enters a white space at the beginning or end of the text and the backend of your website (accidentally) trims the text field, then mosparo receives different content for the submission verification.

Depending on the field type in the form, it is also possible that the content was changed after the user clicked the mosparo checkbox. When you use some kind of special text field (for example, WYSIWYG editor), it's possible that the mosparo field was not reset in time and the user submitted the form with the new content (so again, mosparo received the wrong content for the backend verification).

So, to help me better understand the problem, please let me know how your form looks (is it a normal HTML textarea?) and what backend you use. Do you use the WordPress plugin or one of our other plugins for this site?

2. The only thing you can do right now is to ignore the field. Depending on the plugin/integration you use, you can add the class mosparo__ignored-field to the classes of the field. With that, mosparo will completely ignore the field for the spam validation. With mosparo v1.4, we'll add some functionality to highlight spaces and other invisible space characters to make it easier to understand if an additional character got removed. I like your idea of adding an option to skip the backend verification for a field. However, the problem is that every bad actor can submit whatever they want because we do not verify the field, so a bad actor can manipulate it after validating it.

Please let me know which plugin/integration you use so I can try to reproduce the issue.

Kind regards,

zepich