Is there a way to ban a language

We're getting some russian troll activity and I need to pay some attention to this

Hi blue_Shift,

There's no way to ban an entire language, but you can ban strings in any language.

Go to Components > Contact Enhanced > Options and under the Security tab you can enter multiple strings (one or more words) separated by a semi-colon in the "Banned Text" field.

Also, I recommend adding the most common Russian domains to "Banned Email", for example

yandex.ru;mail.ru

In order to improve spammer detection, you can enable Honeypot feature.

The Email DNS checker actually checkes whether a domain exists and has an MX or an A DNS record. This is very useful if the spammer domains don't actually exist.

"Time Form Submission" and "Max Number of URLs" might also help you to avoid spammers.

Best regards,

I was in the process of doing those when your reply came through confirming I was on the right track. I also banned a few words, and as well added IP blocks on all of Russia to htacess - though I think my Plesk webhost might have a tool that would do this outside the firewall. In CE I enabled honeypot - do you have the code on that built in to your page, rather than my adding undercover.php?

Greetings,

I'm not exactly sure what you mean by " In CE I enabled honeypot - do you have the code on that built in to your page, rather than my adding undercover.php?"
Which code are you referring to? Honeypot is already part of Contact Enhanced.

For a more complete IP blocking solution and Web Application Firewall (WAF) we recommend installing "Akeeba Admin Tools".

Best regards,

If you register with honeypot, they want to put a patch of code on your website; I assume it's built into CE so I don;t have to worry about it.

I have Admintools Pro as well though I find routine lockouts to be a nuisance. (Makes the site faster, though!)

Contact Enhanced uses a simple implementation of Honeypot without the need of registering your site for any other service. The only requirement is for your users to have Javascript enabled on their browsers (which is the default setting).