[LON-CAPA-users] FW 1

[Raeburn, Stuart]

Nathan,

The login page for loncapa.winona.edu includes a "Contact Helpdesk" link which points at the /adm/helpdesk web form. 

As Domain Coordinator you can use:

Main Menu > Set domain configuration > Display ("Log-in page options" checked)

and check the "No" radio button for the "Display "Contact Helpdesk" link" row and push "Save Changes" if you no longer wish to advertise the helpdesk form on the login page for LON-CAPA servers in the winona domain.

That same domain configuration screen includes a "Log-in Help" section with the row: "Contact helpdesk CAPTCHA validation" used to set whether a CAPTCHA will be included in the public-facing helpdesk form.  CAPTCHA options currently include the "original" Authen::Captcha perl module (installed locally) and a third party service: recaptcha (v2).

The expectation is that if CAPTCHA is enabled for the helpdesk web form, there will be fewer emails generated by robotic form completion/submission on this public-facing web page.

The information required and/or requested in the helpdesk form, and also the email address to which data submitted via the form are sent, are configured by a Domain Coordinator via:

Main Menu > Set domain configuration > Display ("E-mail addresses and helpform" checked).

Two other links which may also be included on the LON-CAPA log-in page:  "Forgot password?" and "New user" point at public facing web forms which themselves can be configured to use CAPTCHA, via: Main Menu > Set domain configuration > Display
with "Passwords (Internal authentication)" checked or "Users self-creating accounts" checked respectively.

The next LON-CAPA release expands the list of supported third party CAPTCHA services to include recaptcha v3, hcaptcha, and turnstile, and eliminates reaptcha v1 (shutdown in 2018).

Stuart Raeburn
LON-CAPA Academic Consortium
________________________________________
From: Moore, Nathan T 
Sent: Thursday, November 27, 2025 7:55 AM
To: lon-capa-users at mail.lon-capa.org; Raeburn, Stuart
Subject: FW: 1

FYI, I got a few emails like the one below on 11-25 and/or 11-26.  Seems suspicious.

------- -----
Nathan Moore, PhD

Because of a hand injury, I'm making use of voice to text. Sorry about the typos.

Professor, Physics and Engineering
Winona State University
Minnesota's South-East Coast

-----Original Message-----
From: LONCAPA 
Sent: Wednesday, November 26, 2025 12:42 PM
To: Moore, Nathan T 
Subject: 1

Name: LmMqtzme
E-mail: -1" OR 5*5
Phone: 555-666-0606
Course Information: Mr. - 94102 - section: 1
Subject: 1
Description: 555
URL: https://loncapa.winona.edu/adm/login
Date/Time: Wed Nov 26 06:42:13 pm 2025 (UTC)

Name: LmMqtzme
E-mail: testing at example.com