block fake user - Githubissues

rheikvaneyck / WishMeMusic

DJ Pool Web App

Other

0 stars 0 forks source link

Closed maniacmansion closed 10 years ago

rheikvaneyck commented 10 years ago

could you explain what that means? Just avoid to fill the database with nonsense? I would have to think about how to achieve this...

maniacmansion commented 10 years ago

The most important thing is that we don´t want to bother the admin with spam mail. Another aspect would be the database filling.

rheikvaneyck commented 10 years ago

3 measures:

input validation (2 levels you can choose: medium -> just escape html instructions, secure: filter only valid strings from input), switch is in line 114 of disc_jockey_controller.rb
hidden input field as a honeypot for bots, and
a confirmation page to slow down manual form fillings