Perspectives on Salesforce.com

Subscribe in Feed Reader
Subscribe by Email

48 Comments »

1. Scott Hemmeter Said,

   May 29, 2007 @ 8:25 am

   I am in the process of implementing this on my own websites and found out that you must put a slash on the end of the URL in your < form > tag. For example, if your web to lead spam check script is at “www.example.com/webtolead”, you’ll need to put “www.example.com/webtolead/” (note the slash on the end) for your form to post to.

2. gokubi.com » Blog Archive » Akismet blocking web-to-lead spam Said,

   June 1, 2007 @ 8:21 pm

   [...] Hemmeter shows again just how smart he is. I decided to try and see if I could incorporate Akismet into the web to lead process and I was [...]

3. bigbrownboy Said,

   June 18, 2007 @ 10:33 pm

   I’m just starting to toy with this. After I click submit on my form, I see this message on a white screen: HTTP/1.1 200 OK Server: Is-Processed: true Content-Type: text/html Transfer-Encoding: chunked Date: Tue, 19 Jun 2007 05:14:16 GMT

   I’m then taken to my end URL…any suggestion as to what I might have botched (i.e. I’d like to avoid the intermediary white screen with text)?

4. Scott Hemmeter Said,

   June 19, 2007 @ 8:13 am

   Hmmmm… I did not test this on multiple different configurations. I was seeing this message before I put the / on the end of the URL the form should post to (see the first comment on the post). However, when it happened, it never took me to the return page. Now that it’s working, I am just getting redirected to the SFDC page (in firefox)

   I JUST tested this on IE for the first time and I am seeing what you are seeing. I’ll look into it and see what I can find out.

5. bigbrownboy Said,

   June 19, 2007 @ 10:00 am

   Yeah, I just tested in FireFox for the first time and it works a charm. I’ll stay tuned to see if those much smarter than me have an idea for IE.

   p.s. new with Salesforce.com at a non-profit and your blog has been a fantastic resource!

6. Scott Hemmeter Said,

   June 19, 2007 @ 10:23 am

   I fixed it. You can either download the files again and start over or delete the following line from your index.php file.

   curl_setopt($ch, CURLOPT_HEADER, 1);

   The only thing that changed in the zip was the index.php file. The line above was removed and so was its associated comment.

7. bigbrownboy Said,

   June 19, 2007 @ 11:20 am

   Genius…works nicely. I’ll report back down the road with how its working in practice.

8. Sundeep Parsa Said,

   June 26, 2007 @ 12:01 am

   I would like to try this tool for our site. Does anybody know what types of validations are performed by this tool? Do they look at fields like name, email, postal address etc. to keep SPAM out?

9. Scott Hemmeter Said,

   June 26, 2007 @ 8:43 am

   Sundeep:

   In short, the scripts send everything in your web to lead form to Akismet. You have the ability to tell the script what not to send, if you wish. However, it starts by sending everything.

   The tool treats a web to lead request like a blog comment (like the one you submitted on this post). It uses the First Name and Last Name for the Name, the Email as the Email Address and the Website as the URL. It then includes everything (including First Name, Last Name, Email and Website) as the Comment text. It excludes any fields you specify in the “$Akismet_noPass” array of the constants.php file. If you don’t touch it, then it sends (almost) everything. It absolutely sends 100% of the user submitted fields.

10. Protect Salesforce « Akismet Said,

    July 8, 2007 @ 3:31 pm

    [...] Read the rest and download the script. [...]

11. Kumar Said,

    July 31, 2007 @ 1:54 pm

    I just modified the constants.php and uploaded to another directory. Then, I pointed that directory index.php file in the web to lead form.

    Then, when I execute the web to lead form, a blank white page is showing. It is not redirecting back to the retURL page. Please let me know what seems to be the issue.

    Thanks.

12. Scott Hemmeter Said,

    July 31, 2007 @ 3:11 pm

    @Kumar

    All 3 files need to be included in the same directory on your web server. It sounds like you moved one somewhere else. If you move the constants.php file to another directory, then you need to modify the “include” line in the PHP code for that file. Easiest thing to do is to keep them all in the same directory.

    When you run it, is the lead at least going into Salesforce.com? Is the redirect the only problem?

13. Scott Hemmeter Said,

    September 11, 2007 @ 5:06 pm

    The files were updated with 1 minor change that has a big impact. The web to lead URL was changed to use https.

    To fix it in your scripts, either download the new version or search index.php for “http://www.salesforce.com/servlet/servlet.WebToLead?encoding=UTF-8″ and replace it with “https://www.salesforce.com/servlet/servlet.WebToLead?encoding=UTF-8″

14. ttboy Said,

    October 8, 2007 @ 9:02 am

    Hi,

    I’m testing this script now & it seems to be working well, but I’m having trouble developing a validation rule in Salesforce for this. Would it be possible to post an example?

    Thanks so much!

    -tt

15. Scott Hemmeter Said,

    October 8, 2007 @ 9:21 am

    @ttboy:

    The validation rule needs to evaluate to TRUE to stop a Lead from coming in. Since the field you setup in Step #1 of this post is a checkbox, all you need to do is add a reference to the field as your Validation Rule formula. For example, my field is called Akismet_Spam__c.

    In my validation rule, I just selected that field from the Field Picker. Thus, my validation rule formula is:

    Akismet_Spam__c

    Try that and test it in the UI first.

16. Jenn Said,

    October 9, 2007 @ 3:31 pm

    I keep getting this error:

    Parse error: parse error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or ‘}’ in /home/virtual/site201/fst/var/www/html/staging.borregosolar.com/solar-energy-company/contact/web2lead/Akismet.class.php on line 54

    Any thoughts?

17. Scott Hemmeter Said,

    October 9, 2007 @ 3:53 pm

    @Jenn, make sure you are running PHP 5, not PHP 4. I received this same error once when I was running on PHP4.

18. Sebastien Said,

    October 10, 2007 @ 2:29 pm

    Thanks for this excellent solution Scott. Incorporating Akismet in the web-to-lead process is a bright idea.
    Spamming is a major problem when implementing a web-to-lead solution, and unfortunately implementing an effective web-to-lead process in Salesforce can turn into a real nightmare as its standard web-to-lead utility not only is targeted by spam, but also by lead duplication.

    The solution you’ve developed using Akismet is great, but for those that don’t have sufficient resources (time, programming knowledge…), and would like to easily fill the gap between their website and Salesforce without having to worry about spam, I think a excellent solution is to use FormVester (available from the AppExchange).

    FormVester generate leads from any of your existing online forms, without the hassle of reprogramming them…and it is spam-free. The reason is that, it works by adding a snippet tracking code into your website pages (that will execute a hosted script), so that, no OID number is ever exposed in the source code of the page (as opposed to the standart Salesforce web2lead page). Spam bots are then not able to take advantage of this number ensuring a clean spam-free lead generation.

    An interesting other thing about FormVester, as opposed to the default Salesforce Web-to-Lead utility, is that it always checks if a lead already exists in Salesforce before creating/updating it (using a 6 rules based filter) so that it will never duplicate the lead.

    Give it a try! FormVester for AppExchange

    Hope it will help!

19. ttboy Said,

    October 12, 2007 @ 8:25 am

    Hi Scott,

    Thanks for being so responsive! I’ve uploaded the files to my webserver & am testing now. I’m getting a white screen now after submitting the form - it seems to go to the index.php folder & get stuck. I looked at the comments here & noticed that others were having the same issue. I tried the fixes mentioned, but nothing seemed to work. Let me know if you know of any workarounds.

    Best,
    t

20. Scott Hemmeter Said,

    October 12, 2007 @ 8:52 am

    @ttboy: Is the lead data going into Salesforce.com? If so, do you have a return URL in your web to lead form? It should bring you back there. Also, your HTML form should either point to the folder (http://www.example.com/spamcheck/) with the slash on the end of the URL or you can post directly to index.php (http://www.example.com/spamcheck/index.php). The second way would be the sure fire way to post to the right place. The first way requires your web server to use index.php as a default page when navigating to a folder.

    If you give me the URL, I can test it.

21. ttboy Said,

    October 12, 2007 @ 9:23 am

    Hi Scott,

    I do have a return url. I tried pointing the form to bother to both foldername/ & foldername/index.php. I’ll double check that I’m not missing something….

    thanks again!!
    -t

22. How to create leads using PHP and Salesforce SOAP API - Mike Simonds Said,

    March 5, 2008 @ 6:22 am

    [...] Skype also have you thought of using a web to lead to populate your salesforce leads tables > Fight Web to Lead Spam w/ Akismet | Perspectives on Salesforce.com Anyway get back to me and I hope this helps [...]

23. Carolyn Said,

    March 10, 2008 @ 2:34 pm

    Has anyone developed a solution that will work with PHP4? I tried just using Bret Kuhns PHP4 toolkit instead, but no leads appear in Salesforce… we’re a nonprofit implementing a new site with Joomla; I have the form in a wrapper because I couldn’t get it to appear correctly any other way. I expect that we will have spam problems unless I implement something like this, and we can’t afford anything that requires a subscription. Any ideas? Thanks!

24. Scott Hemmeter Said,

    March 10, 2008 @ 3:04 pm

    @Carolyn:

    Do you have a PHP5 server anywhere in your organization that could host the existing code? That will be your easiest option.

    I haven’t implemented it in PHP4. You did the right thing by trying the Akismet PHP4 adapter in place of the one I used. Did you go through the code and change the places using the PHP5 class and re-write them for the PHP4 one? Do you have cURL installed?

25. Carolyn Said,

    March 10, 2008 @ 3:47 pm

    Thanks for the quick reply! We don’t host our own website; I only got as far as I did by carefully following your directions, so although I assume cURL is installed, I don’t actually know. Also I don’t know how to rewrite the code for the PHP4 class. (I’m really helpful, I know. NOT.)

    So I won’t be surprised to have reached a dead end here, but *if* some helpful soul out there has already worked through the problem…

26. Jzilla Said,

    March 17, 2008 @ 5:21 pm

    Hi.

    Was there ever any resolution to the retURL redirect issue Kumar and ttboy were having? I’m having the same issue. Lead data is entering sforce and appears to be working otherwise, but no redirect to the retURL; it just sits on the blank page index.php.

    I’ve checked the items you mentioned previously, but still to no avail.

    Any info appreciated.

27. Scott Hemmeter Said,

    March 17, 2008 @ 8:45 pm

    @Jzilla:I have not been able to re-produce the issue you are experiencing. One thing you could try is to add the following lines of PHP code to the beginning of the index.php script.

    error_reporting(E_ALL);ini_set('display_errors', '1');

    This will turn on error handling.

28. Jzilla Said,

    March 23, 2008 @ 9:16 pm

    Thanks for the reply Scott.

    I tried adding the error_reporting code, but no errors show up. Still just the blank page. I tried just adding phpinfo(); to see what’s running, and it’s reporting PHP 5.2.3, with cURL enabled (cURL Information: libcurl/7.15.3 OpenSSL/0.9.7a zlib/1.2.3 libidn/0.5.6).

    I checked the php.ini file and it has register_globals set to Off - might that be an issue? As well as some Zend extensions, nothing else.

    Any other ideas? Is there something I should ask the webhost?

    In the meantime, as a temporary measure, I created a return.php file with a little cURL header redirect function in it to redirect to the retURL address, adding include(’return.php’); to the index.php file (I couldn’t get it to work otherwise).

    It’s not particularly elegant, but basically works, though it ends up “calling up” the retURL page within the index.php script and folder (presumably because of the include), instead of actually redirecting to the .html page. I’d rather it just go directly to the html confirmation page, but haven’t been able to figure it out. I have little-to-none PHP skills.

29. Scott Hemmeter Said,

    March 24, 2008 @ 8:26 am

    @Jzilla:

    register_globals can be off. It’s off by default in PHP5, I believe.

    I did a bit of digging into the code and the Akismet PHP5 class I am using uses PHP’s remote file functions, which requires allow_url_fopen to be ON in your PHP setup. I think there was a recent issue with this setting and many web hosts (including mine) turned this off by default to protect their customers. However, with my web host, I can edit the PHP.ini file and turn it back on. Check to see if allow_url_fopen is ON. If not, see if you can turn it on via your php.ini. I don’t think it’s a major issue to turn on (do your own research), but web hosts were turning it off by default to protect the masses.

30. Jzilla Said,

    March 24, 2008 @ 4:51 pm

    According to my phpinfo allow_url_fopen is ON. I don’t know if it matters, but allow_url_include is OFF.

    I’m curious if Kumar or ttboy ever resolved their issues.

    Either way, thanks for the follow-up.

31. Carlos Said,

    March 25, 2008 @ 5:45 am

    We feed our web2lead to Ringlead’s declone before it is routed to sfdc. Will this script work in this scenario?

32. Scott Hemmeter Said,

    March 25, 2008 @ 7:41 am

    @Carlos:

    If RingLead posts it’s data directly to Salesforce’s web to lead rather than connecting via the API, then this might work. I don’t know anything about RingLead, so I can’t say for sure. The script is expecting a set of data that comes through with the field names as used by Web-To-Lead.

    I’d be happy to discuss with you and the folks at RingLead if you help facilitate the connection. You already have my email, so let me know.

33. Ejay Queja Said,

    May 5, 2008 @ 9:08 pm

    I know this is out of the topic but ii hope you can help a noob on the web to lead process. Is there a way wherein i can just update the fields via web to lead if the lead has an existing record in the lead tab?

    do direct me to the right direction please.

    thanks a lot.

34. Web to lead help - Mike Simonds Said,

    May 6, 2008 @ 6:50 am

    [...] function from the PHPToolKit. OR You could use this system that is free and can be downloaded here If you have to write a form and capture them it can be done quite easily Do you know PHP? If you [...]

35. Scott Hemmeter Said,

    May 6, 2008 @ 8:06 am

    @Ejay Queja:

    Doing this will require something custom. You can look into 3rd party application on AppExchange or write something. If you write something, what you’ll want to do post your form to that page (similar to how I do it on this post). Different, though, than the script in this post, you’ll need to have that page perform lookup(s) in Salesforce to match an existing lead and, if found, update it. If not found, then you could create the Lead via the API or send it through to Web-to-Lead.

    If you want consulting help with this, please complete the Contact Us form on this site and I’ll see what I can do.

36. X-Squared On Demand Said,

    July 2, 2008 @ 8:47 pm

    Wordpress, Akismet, and Web-to-Salesforce…

    Scott Hemmeter posted a blog entry about using Akismet and PHP to check Web-to-Lead submissions for spam. We are going to start an experiment using Akismet in the following scenarios:
    -Web-to-Lead with Google AdWords enabled
    -Web-to-Case
    ……

37. David D Said,

    October 17, 2008 @ 12:00 pm

    Scott,

    I am having the same problem some other users reported earlier, where the form posts to the index.php file and then nothing happens.

    Leads are not going to my salesforce account.
    I have a return URL working
    allow_url_fopen is ON
    Adding error_reporting(E_ALL);ini_set(’display_errors’, ‘1′); doesn’t resLit in anything
    register_globals is ON

    I’d really like to get this working, was there ever a solution to this blank index.php issue?

    Regards,

38. Scott Hemmeter Said,

    October 17, 2008 @ 1:36 pm

    @David D,

    I have never been able to reproduce the issue. Looks like you did your due diligence and set the parameters described in the comments here.

    Maybe try setting allow_url_include to 1?

39. Jason Ferezy Said,

    November 10, 2008 @ 8:18 am

    This issue only happens with Firefox. I am having the same problem - works great on all browsers other than firefox which is surprising to me because there seems never to be a problem with firefox.

    If anyone has a solution - it would be greatly appreciated…

40. Scott Hemmeter Said,

    November 10, 2008 @ 8:52 am

    Strange. I use this solution at my Contact Us page. I’ve never experienced an issue with Firefox. I wonder if there is a PHP.ini something or other that is still causing it.

41. Tim Henson Said,

    November 16, 2008 @ 11:50 pm

    Thanks for the great work here. I was experiencing the blank index.php issue while I was trying to set this up today. I just changed the Salesforce Web to Lead page from https to http and now it’s working fine.
    Is the https working for some people? Is there any additional configuration for curl or php5 necessary to enable https?

42. Robert Gowans Said,

    December 3, 2008 @ 12:35 pm

    Scott,

    Excellent solution. Akismet is incredibly accurate and reliable.

    Does your solution support the Salesforce / Google Adwords integration? For example, if I implemented your solution would I still see Adwords data related to leads captured via the web to lead form?

    Regards,

    Rob

43. Eoin Said,

    January 7, 2009 @ 9:53 am

    Our website is hosted on servers where allow_url_fopen is disabled, and there is no way of changing that.

    Does that stop me from using this marvellous idea to reduce spam web to leads? (I’m pretty sure it does, but hoping that I’m wrong)

    thanks

44. Scott Hemmeter Said,

    January 7, 2009 @ 10:14 am

    @Eoin,

    From what I’ve been able to determine, you need that parameter on and this parameter cannot be set at runtime. It might be set in the php.ini file. Sorry. Let me know if you figure out a workaround.

    This requirement is in the PHP5 adapter being used and not in the code I wrote.

45. Eoin Said,

    January 7, 2009 @ 10:27 am

    Thanks for the prompt response, and of course for putting this together in the first place. I was quite excited to find it!

    But disappointed that the stars are not quite aligned for me today. I can’t set that parameter on. My webhosts tell me that “allow_url_fopen is disabled on all our servers as a security precaution. If you wish to load an external file, please use the curl functions” but sadly I don’t know anything about PHP, so I have no idea if curl functions will work. Or how to go about it.

    If anyone reading this knows how to help me, please get in touch through the website.

46. Matt Kaufman Said,

    January 7, 2009 @ 10:39 pm

    Another satisfied customer! We’ve been having issues getting our web-to-lead form to work in wordpress since we upgraded our site. Web-to-Case was working but not Web-to-Lead (really weird). We implemented your solution and solved the problem and enhanced our functionality. Thanks Arrowpointe!

47. Eoin Said,

    January 21, 2009 @ 3:59 am

    Scott - I’m completely out of my depth here, so this might be a stupid question.

    Is there any way you could tweak your code so that it uses a adapter that doesn’t require fopen, but uses curl?

    Of course, if it’s much work, I’d understand if the answer is no!

48. Scott Hemmeter Said,

    January 21, 2009 @ 10:40 am

    @Eoin

    I would like that too and I suppose its possible. The part that uses fopen is the adapter written by another developer for the Akismet community. I doubt I’d have much pull to ask him to update it, but it’d be nice if he did since many PHP installs have turned off their file functions. The alternative would be for us/you to modify the adapter itself. My gut says it wouldn’t be too hard, but I haven’t investigated it too much.

RSS feed for comments on this post · TrackBack URI

Leave a Comment

All comments are moderated. Other visitors will not see your comment until it has been approved.

Name (required)

E-mail (required, never displayed)

URI

• Brought to you by

  

• Search

• Arrowpointe Products

  • Arrowpointe Maps
  • Auto vCard
  • Info Center
  • Salesforce & Google Maps
  • User Adoption Dashboard
  • Web to Lead Spam Check

• Pages

  • About this Blog
  • Subscribing To This Site
  • Advertise Here
  • Request a Product Review
  • Contact Us
  • del.icio.us links
  • App Exchange Apps

• Top 15 Posts

  1. Arrowpointe Maps Passes Security Review
  2. MapQuest Developer Site & Blog
  3. Create Maps from Salesforce Reports
  4. Upgrade to AppExchange Package
  5. Arrowpointe Maps v1.0.9
  6. Setting Up the Search Nearby Feature
  7. Arrowpointe Maps 1.2
  8. Geographic Coverage of Arrowpointe Maps
  9. Proximity Searching in Salesforce.com (demo)
  10. Opportunity Roll-Up Summary Recommendations
  11. Arrowpointe Maps 1.2.1
  12. New PHP & Ruby on Rails Toolkits
  13. Invoke Apex from a Custom Button using a Visualforce Page
  14. Spring '09 Release Notes
  15. Spring 09 Maintenance Schedule

• Archive by Category

  • AppExchange
  • Arrowpointe Products
    • Akismet Web-To-Lead
    • Arrowpointe Maps
    • Auto vCard
    • Google Maps Mashup
    • Info Center
    • Sidebar Summary
    • User Adoption Dashboard
  • Competition
  • Events
    • Developer Conference - May 2007
    • Dreamforce 2006
    • Dreamforce 2007
    • Dreamforce 2008
  • Google Apps
  • Innovations
  • Interview
  • News
  • Non-Salesforce Items
  • Open Source
  • Other
  • Product Review
  • Releases
    • Spring '07
    • Spring '08
    • Spring '09
    • Summer '05
    • Summer '06
    • Summer '07
    • Summer '08
    • Summer '09
    • Winter '06
    • Winter '07
    • Winter '08
    • Winter '09
  • Rumors
  • Site Info
  • The Community
  • Tips
    • APEX Code
    • API
    • Configuration
    • Salesforce 101
    • Visualforce
  • Wish List

• Recent Trackbacks:

  • Jeff Douglas - Technology, Coding and Bears… OH MY!: Using PHP to call an Apex Web Service
  • ForceCertified.com: Spring 09 Release is Coming!
  • Mike Simonds: Calling Web Services from PHP
  • BuzzYA!: Cloud(s), Hype, and Freedom
  • Perspectives on Salesforce.com: Sidebar Summary using Visualforce

• Recent Comments

  • Scott Hemmeter (July 2, 2009)@d3developer, I fixed my old demo and I also pointed to the right place on bikramfinder (customer...
  • d3developer (July 2, 2009)Anything more recent out there? Bikram link is dead, FYI.
  • Scott Hemmeter (June 12, 2009)@BrianP, I’d have to see your code to know for sure. One thing I do know is that you should be...
  • BrianP (June 12, 2009)Using you code examples above i am haivng trouble getting the test method to work correctly. When i run the...
  • Rich (June 6, 2009)Alternatively, we could fix the debug log
  • Scott Hemmeter (June 2, 2009)@Josh, the test code is in the post.
  • Josh (May 29, 2009)Hey Scott, I’m an admin without much coding experience, and I’m trying to get this working for my...
  • Rajesh Shah (May 18, 2009)This is a nice way to handle test methods for Apex Callouts. However I would still prefer the other way...

• Blogroll

  • CodeBit
  • CRM FYI
  • Force Monkey
  • gokubi.com >> CRM
  • joe-ferraro.com
  • MK Partners
  • Salesforce Blogs
  • Salesforce on Rails
  • Salesforce Source
  • Salesforce.com Blogs
  • Salesforcewatch.com
  • Sforce
  • Shamrock CRM
  • Simon Fell
  • The Enforcer.net
  • The Salesforce and More Blog
  • Warrior Point
  • X-Squared On Demand

• Developer Links

  • Apex Toolkit for Eclipse
  • Apex Wiki (Developer Documentation)
  • Developer Forums
  • OSX Tools for Salesforce.com
  • Salesforce Developer Site
  • Sourceforge Open Source Community
  • Winter ‘06 Style Guide

• Salesforce Web Properties

  • App Exchange
  • Dreamforce Conference
  • Idea Exchange
  • Salesforce
  • Salesforce Blogs
  • Salesforce Community
  • Salesforce Developer Site
  • System Status Page
  • User Groups