Recipes / Spam screen for public forms /

History

1 version. Each merged proposal adds a version and credits its author.

1. v1Supa Humans

   First published version.

   Steps

   1. +Added: Check length limits on every field first.
   2. +Added: Reject text with links in it (http, www, or bare domains).
   3. +Added: Reject text that looks like a secret key or password.
   4. +Added: Reject text that tries to give instructions to a bot, like 'ignore previous instructions'.
   5. +Added: Add a hidden 'website' field. Real people leave it empty; simple spam bots fill it in.
   6. +Added: Save only after all checks pass, and treat saved text as data, never as commands.

Propose the next version →