search

stcr / subscribe-to-comments-reloaded

Subscribe to Comments Reloaded allows commenters to sign up for e-mail notifications of subsequent replies.
56 stars 32 forks source link

protect management form page with ReCpatcha #564

Open bluisier opened 4 years ago

bluisier commented 4 years ago

Hi,

After noticing my transactional e-mail bounce rate was way too high, I noticed I had a lot of spam e-mails subscribed to the comments of many of my blog posts. After some research, I noticed that the management page add a lot of strange traffic. As the form on this page is the only one on my website that is not protected by a recaptcha (there are many plugins to protect the comment forms), I guess bots have submitted many spamy e-mails through this page. Would it be possible to protect this form with invisible recaptcha?

thanks a lot

BobaWebDev commented 4 years ago

Hi @bluisier

I'll add invisible recaptcha to the to do list, but there is an anti-spam measure for that page you can enable.

In WP admin > STCR > Options, near the bottom, you'll see "Challenge question" and "Challenge answer" options, those are for that page.

For example the question option can be set to "What is 1 + 3?" and the answer option set to 4 of course.

The challenge can be whatever you want of course.

tammyalexandra commented 4 years ago

This solution does not work completely (StCR 200422, Wordpress 4.9.14). It only protects the version of the page where a user first subscribes to a post, not when a user returns to view/change all of his existing subscriptions.

BobaWebDev commented 4 years ago

Hi @tammyalexandra

I see the issue, we'll sort that out in the next update.