statamic / ideas

💡Discussions on ideas and feature requests for Statamic
https://statamic.dev
30 stars 1 forks source link

User registration security #1043

Closed robdekort closed 9 months ago

robdekort commented 9 months ago

Currently the user registration form doesn't seem to have any security built in.

On a site of mine we implemented mail verification, but that still doesn't stop bots from creating unverified accounts. They use actual mail addresses so mail providers get spam complaints, etc.

It would be wonderful if you could add a honeypot to the form to prevent some submissions. Plus maybe optional rate limiting?