The 2026 Drupal Business Survey is open. Your response will help shape the future of the Drupal business ecosystem.We receive the following requests from bots: POST /?q=user/register
But our site has clean URLs enabled and human users never get to non-clean URL pages.
Proposed solution: stop form submissions on non-clean URLs when antibot is enabled on that form.
| Comment | File | Size | Author |
|---|---|---|---|
| #5 | antibot-urls-3107696-5.patch | 1.13 KB | gresko8 |
| #2 | antibot-urls-3107696-2.patch | 741 bytes | klausi |
Comments
Comment #2
klausiPatch.
Comment #3
mstef commentedThis is very interesting. I would ask two things:
1) Make this admin-configurable so it can be disabled.
2) Port to 8.x since 7.x is no longer being supported.
Comment #4
gaurav.kapoor commentedThere isn't any plan to support the 7.x version and I don't think clean URLs is a very big issue anymore in Drupal 8/9. I haven't seen any serious web owner still using nonclean URLs.
@klausi, @mstef feel free to open the issue again if you think we should spend time on having this feature in the Drupal 8/9 version.
Comment #5
gresko8 commentedAttaching a re-roll of the patch along with a possibility to disable this by setting a variable.
Comment #6
danrodComment #7
danrodGiven that still a lot of people use the 7.x version of this module, I'll apply the patch and test it.
Comment #8
danrodGiven that still a lot of people use the 7.x version of this module, I'll apply the patch and test it.
Comment #9
danrodThis patch was already applied in the issue https://www.drupal.org/project/antibot/issues/3057534
I'll close this issue
Comment #10
danrod