search

backdrop-contrib / honeypot

Backdrop port of Drupal module. Uses both the honeypot and timestamp methods of deterring spam bots from completing forms on your site.
GNU General Public License v2.0
3 stars 1 forks source link

Some forms should never be protected #34

Open ghost opened 3 years ago

ghost commented 3 years ago

We recently had a problem on Backdrop's Forum where Honeypot's timeout feature was being applied to the Link dialog form in CKEditor. Not only that, but multiple links in a post meant an increasing timeout limit for each one. See https://github.com/backdrop-ops/forum.backdropcms.org/issues/123 for details.

This was because it was set to protect all forms, and apparently the link dialog is a separate from. I don't think the link dialog even needs its own protection/timeout. So I recommend removing this (and similar) forms from that setting.

indigoxela commented 3 years ago

Oh, I thought, this was by intention. :grinning: (I always count to five when inserting a link in a forum post.) I didn't understand why, but assumed someone had a fancy idea for additional protection - whatever it may be.

ghost commented 3 years ago

I always count to five when inserting a link in a forum post.

Spam protection gone wrong right there...