ChurchApps / ChurchAppsSupport

Support Wiki for All ChurchApps.org apps
3 stars 2 forks source link

Add captcha to anonymous donation form #158

Closed jzongker closed 1 year ago

jzongker commented 1 year ago

Bots are submitting the B1 donation form in mass to search for valid credit card numbers. Let's add a basic captcha to it.

It doesn't need to be anything particularly robust. Just free (ideally an npm component we can just install) and if possible a simple "check a box" type captcha rather than a puzzle solving one.

jzongker commented 1 year ago

There's one big challenge to consider on this one. Churches will be using custom domains for b1 (hypothetical example: ironwoodchurch.com is an alias for ironwood.b1.church). That means we can not simply provide a white list of domains for third party services that require it, such as recaptcha.