Alternatives to using a captcha to trap spam

[Dennis Gray]

We would like to implement some kind of a spam trap on our contribution page but I do not want to use a captcha, if possible.

Are there alternatives, like botcha or honeypot, which are available as Drupal modules?

[Donald Lobo]

not via the UI. You can potentially add other "spam trap" methods via a hook

lobo

[Coleman Watts]

If you use Webform-Civicrm as your contribution page (works with some but not all payment processors) then you have the whole gamut of drupal spam-control modules available.
The regular Civi contribution pages only have Captcha available.
Or you could also use something that operates at the apache/server level and is not drupal or civi specific, such as bad behavior.

But I'm curious to know why you want to do this at all for a contribution page. Shouldn't the presence of a valid credit card be spam control enough?

[Dennis Gray]

We sometimes get several dozen attempts a day with invalid credit card, but, you are correct, the fact that the card is invalid should be enough.

We won't be changing our contribution page any time soon so won't consider webform at this time.

[Coleman Watts]

Card testing is a serious problem and you're right to take it seriously. This is something that webform-civicrm addresses by default, and unfortunately Civi does not. Probably we should add this feature to core, but a workaround is to use hooks like I've done on my site to limit submissions by IP.

https://github.com/woolman/drupal-modules/blob/master/woolman_website/woolman_website.module#L574