participedia / api

Website and API for Participedia V3
https://participedia.net
MIT License
20 stars 14 forks source link

Spams issue - Security and CORS check #1127

Closed paninee closed 1 year ago

paninee commented 2 years ago

We noticed a LOT of spam entries. Checking the timestamps, they look like a bot, since they're about 20 seconds apart. This is from the production database. image

We need to check if there's a security breach, since we have a CAPTCHA implemented on the website to make sure they can't publish without checking that they are humans.

Upoon checking CAPTCHA activity, it's clear that the current level of CAPTCHA implementation does not work, since the bot can still get pass the CAPTCHA. image

We need to do make our reCAPTCHA more advance.