https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3144 --- Comment #36 from David Cook <dcook@prosentient.com.au> --- (In reply to Christopher Vella from comment #31)

Potentially the bot could be trying input forms at random, or more advanced and only reading through the visible elements of the page.

Yeah, I think there are a few different things it could be. I'd love to know what data is being sent exactly.

Rather than go down the positive captcha route yet. We could attempt to make this negcaptcha smarter.

Totally agree. I'm absolutely on board for that.

One idea could be to IP ban any user who submits content to that form (I don't see any reason why a normal user would).

I'm not sure I understand what you mean here. When the user fills out the form, their browser would be POSTing the data to the Koha server, so it would be something a normal user would do.

We could also have the field name randomise per instance.

Maybe. I'd be interested to see how other people are solving this problem out in the world. -- You are receiving this mail because: You are watching all bug changes.