Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Captcha to prevent brute force and spam #32

Open
khanakia opened this issue Sep 27, 2020 · 4 comments
Open

Captcha to prevent brute force and spam #32

khanakia opened this issue Sep 27, 2020 · 4 comments
Assignees
Labels
question Further information is requested

Comments

@khanakia
Copy link

Is your feature request related to a problem? Please describe.
Yes

Describe the solution you'd like
You have really cool application 馃挴 but still something is bothering me so i wanted to ask
How can we prevent somebody brute force or spamming the form ? I do not see any clarification about that on the website how will you be preventing that ? As my email could be flooded with emails

Describe alternatives you've considered
Maybe captcha

@cjpatoilo
Copy link
Member

Hi @khanakia. Good question!

Airform uses Google reCAPTCHA, an advanced risk analysis engine and adaptive challenges to keep malicious software from engaging in abusive activities on your form.

Besides, Airform uses the best Cloud Flare features. Cloud Flare offers security features to protect Airform from threats. The pre-loader does pre-cache of the Airform most popular pages to make load times much faster and safe.

@khanakia I hope I was helpful.
Please, feel free to ask me anything.

@cjpatoilo cjpatoilo self-assigned this Sep 29, 2020
@cjpatoilo cjpatoilo added the question Further information is requested label Sep 29, 2020
@khanakia
Copy link
Author

Hi @cjpatoilo ,

Thanks for clarification i see one more security concern. As airform does not uses any database so anybody can modifying the form fields with Javascript and then submit the form and then i will get unecessary emails with those extra fields.

@Tragio
Copy link

Tragio commented Oct 18, 2020

Hi @cjpatoilo,

Really thank you for your work. I wonder if you ever considered changing from reCaptcha to hCaptcha, the change is almost seamless. Even Cloudflare made that changed.

Doing that we avoid the data collection made by Google.

All cookies placed by Google over the last 6 months,
How many mouse clicks you've made on that screen (or touches if on a touch device),
The CSS information for that page,
The date,
The language your browser is set to,
Any plug-ins you have installed on the browser, and
All Javascript objects

In this way, we can also advertise this product as a privacy-friendly solution, and as far as I know, this would be the first form system providing hCaptcha.

@wuniversales
Copy link

What if we use wehatecaptchas.com?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

4 participants