search

in2code-de / femanager

Modern TYPO3 Frontend User RegistrationTYPO3 Frontend User Registration and Management based on Extbase and Fluid and on TYPO3 8 and the possibility to extend it to your needs. Extension basicly works like sr_feuser_register
https://www.in2code.de/agentur/typo3-extensions/femanager/
48 stars 118 forks source link

Spam dispatch via double opt-in mail #565

Open icehawk-de opened 5 months ago

icehawk-de commented 5 months ago

We use double opt-in registration and manual activation by an admin.

The registration form is protected by sr_freecap. Unfortunately, this no longer offers protection against spam bots, so that they can register successfully. The resulting double opt-in mail was „correctly“ declared as spam by our hoster and the mail delivery was blocked by the server.

Are there any other ways to secure the registration form? Can you give me any tips or possibilities?

sbusemann commented 5 months ago

Hi, in the latest versions of the femanager a new setting was introduced which can prevent deletion of profiles. This approach will be added also for confirmations. This can prevent spam bots in the future.

icehawk-de commented 5 months ago

OK. We are using the 6.4.0 on a TYPO3 10. Is it here also implemented?

Can you give me a hint into the documentation?

sbusemann commented 5 months ago

https://docs.typo3.org/p/in2code/femanager/8.1/en-us/Features/ConfirmUserConfirmationRefused/Index.html This works at the moment only for refusting profiles. A simular feature is planned also for confirmations. You can sponsor this, if you want it fast.

Danielvdv commented 5 months ago

The problem is that the bots use the registration to send spam and sr_freecap is actually useless. It should be possible to integrate other Captchas like hCaptcha. The function you describe does not explain exactly how this is supposed to work, how it further prevents bots and how reliable it ultimately is.

sbusemann commented 5 months ago

It is not the same as a captcha solution, but it is an additional step, that has to be confirmed.

icehawk-de commented 4 months ago

Is it possible to integrate hcaptcha as an additional option for spam prevention.