topic Re: Using Captcha with Survey123 in ArcGIS Survey123 Questions

Using Captcha with Survey123

ZDouiri — Tue, 14 Sep 2021 22:00:05 GMT

Hi,

Is there a way to add Captcha in Survey123? If not is there a solution to implement in Survey123 to keep malicious software from engaging in abusive activities?

Thanks

Zakaria

Re: Using Captcha with Survey123

ZacharySutherby — Tue, 21 Sep 2021 22:42:38 GMT

Hello @ZDouiri,

We have ENH-000130906 logged to support Captcha in Survey123. The issue at the moment is if Survey123 were to implement Captcha it would provide a false sense of security. While automated form fills could be prevented for a public survey the REST endpoint is still publicly available for spam submissions and a basic python script would be able to spoof submissions bypassing Survey123 altogether.

Ultimately to adequately make the workflow of using Captcha effective we need the implementation of ENH-000122698 on the ArcGIS Online/Enterprise side of things to be implemented so that both the Survey form and REST endpoint can be configured to prevent spam submissions.

A few things that can be done now is to set “Only one submission is allowed per submitter” under the Collaborate > Share survey tab as that will use a browser cookie to prevent multiple submissions. Please see this documentation for the workflow.

Alternatively another workflow that could be used is to publish a Survey123 survey then take the feature service that was created and re-add it to the Organization as an item with credentials stored so that limitations can be placed on the service to limit rate/referrer usage, and then update the form to use the feature service with stored credentials. From there the survey form can be embedded into a website using the Survey123 web app JSAPI and incorporated on a page with Captcha.

Thank you,

Zach

Re: Using Captcha with Survey123

AaronPDXPaul — Wed, 19 Jan 2022 19:12:20 GMT

Hi Zach,

According to fairly recent Survey123 documentation, we can add a Google reCAPTCHA to our Survey123 Forms. By adding a CAPTCH extension. Can you provide any tips/resource on how to do this?

https://developers.arcgis.com/documentation/mapping-apis-and-services/security/security-best-practices/#use-a-captcha

Thank you,

Aaron

Re: Using Captcha with Survey123

ahargreaves_FW — Wed, 26 Jan 2022 20:21:24 GMT

@AaronPDXPaul can you point me toward the Survey123 doc you mention above? I too am in need of securing a public form using captcha...

Re: Using Captcha with Survey123

AaronPDXPaul — Thu, 27 Jan 2022 00:34:25 GMT

ahargreaves_FW

I may have read the article wrong. The link I provided above is for Mapping API's and Location Services. It's possible there still is not a solution for CAPTCHA's in Survey123. I'm hoping Zach chimes in, but it seems he might not. Zach, please help us, you're our only hope 🙂

Re: Using Captcha with Survey123

JodyZhengLiu — Thu, 27 Jan 2022 07:08:26 GMT

Hi @AaronPDXPaul , @ahargreaves_FW , @ZDouiri ,

We are actively working on the Captcha support in the Survey123 web app but it's too early to give a solid timeframe yet.

If possible, could you please give some background on your requirement for the Captcha feature in the survey? For example, is a particular Captcha provider preferred or NOT preferred? Is visible or invisible Captcha is preferred?

Thanks,

Jody Zheng Liu

Re: Using Captcha with Survey123

ahargreaves_FW — Thu, 27 Jan 2022 14:04:11 GMT

@JodyZhengLiu thank you, and the Survey123 team, for the rapid feedback and considering this important need.

Our preference is Image recognition CAPTCHA (see screenshot). Further, some consideration of the use of geo IP would be beneficial also.

Re: Using Captcha with Survey123

AaronPDXPaul — Thu, 27 Jan 2022 15:20:54 GMT

Hi Jody,

We'd be good with any kind of Captcha. We'd actually prefer something simple. But anything would be better than nothing. We look forward to your progress and continued feedback on status. Thank you

Re: Using Captcha with Survey123

FredMitchell — Thu, 07 Apr 2022 17:37:13 GMT

We also have a use case for this on a public facing form our county government is using. Looking forward to seeing this become available.

Re: Using Captcha with Survey123

ahargreaves_FW — Tue, 13 Sep 2022 20:32:19 GMT

@JodyZhengLiu do you have an update on when this may be available? We're moving closer to deploying our Public Survey123 based workflow.

Thanks

Re: Using Captcha with Survey123

AaronPDXPaul — Tue, 13 Sep 2022 21:05:41 GMT

We also have needs for this at Clackamas County, OR

Re: Using Captcha with Survey123

iHack — Mon, 12 Dec 2022 19:05:57 GMT

CAPTCHA for survey submission is currently available in beta for the Survey123 website and web app. In Survey123 Connect, the XLS form field values are type=note and name=generated_note_prompt_captcha

Re: Using Captcha with Survey123

FredMitchell — Tue, 16 Apr 2024 21:59:23 GMT

I tried adding this and it broke my grid layout. Is there a way to add a captcha while using dynamic-grid? @JodyZhengLiu Thanks!