[Koha-bugs] [Bug 3144] anti-spam for opac-suggestions

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3144

--- Comment #36 from David Cook <dcook at prosentient.com.au> ---
(In reply to Christopher Vella from comment #31)
> Potentially the bot could be trying input forms at random, or more advanced
> and only reading through the visible elements of the page.
> 

Yeah, I think there are a few different things it could be. I'd love to know
what data is being sent exactly.

> Rather than go down the positive captcha route yet. We could attempt to make
> this negcaptcha smarter. 

Totally agree. I'm absolutely on board for that.

> One idea could be to IP ban any user who submits
> content to that form (I don't see any reason why a normal user would). 

I'm not sure I understand what you mean here. When the user fills out the form,
their browser would be POSTing the data to the Koha server, so it would be
something a normal user would do. 

> We could also have the field name randomise per instance.

Maybe. I'd be interested to see how other people are solving this problem out
in the world.

-- 
You are receiving this mail because:
You are watching all bug changes.