search

fastlane / boarding

Instantly create a simple signup page for TestFlight beta testers
https://fastlane.tools
MIT License
877 stars 191 forks source link

Fake signups? #208

Closed robvolk closed 6 years ago

robvolk commented 6 years ago

I'm seeing a dozen or so fake signups every day from random email addresses. I've received a few unsubscribe emails from the people, as a reply from the invite email. It seems like someone's submitting emails to my Boarding site to see what happens, possibly to try and validate them. Not sure exactly.

Is anyone else seeing this? Has anyone implemented a Captcha or any other honeypots to combat this?

KrauseFx commented 6 years ago

Mh, I haven't seen this for any of my projects, and I think you're the first one reporting this.

robvolk commented 6 years ago

I secured the page by requiring a password with the ITC_TOKEN env var and that should fix the issue.

If we added a honeypot to the signup form, that would also fix it, and we wouldn't need to ask users for a password. Anyway that's a new feature, so I'll close this.