We receive the following requests from bots: POST /?q=user/register

But our site has clean URLs enabled and human users never get to non-clean URL pages.

Proposed solution: stop form submissions on non-clean URLs when antibot is enabled on that form.

Comments

klausi created an issue. See original summary.

klausi’s picture

Status: Active » Needs review
StatusFileSize
new741 bytes

Patch.

mstef’s picture

Status: Needs review » Needs work

This is very interesting. I would ask two things:

1) Make this admin-configurable so it can be disabled.
2) Port to 8.x since 7.x is no longer being supported.

gaurav.kapoor’s picture

Status: Needs work » Closed (outdated)

There isn't any plan to support the 7.x version and I don't think clean URLs is a very big issue anymore in Drupal 8/9. I haven't seen any serious web owner still using nonclean URLs.

@klausi, @mstef feel free to open the issue again if you think we should spend time on having this feature in the Drupal 8/9 version.

gresko8’s picture

Status: Closed (outdated) » Needs review
StatusFileSize
new1.13 KB

Attaching a re-roll of the patch along with a possibility to disable this by setting a variable.

danrod’s picture

Assigned: Unassigned » danrod
danrod’s picture

Given that still a lot of people use the 7.x version of this module, I'll apply the patch and test it.

danrod’s picture

Given that still a lot of people use the 7.x version of this module, I'll apply the patch and test it.

danrod’s picture

This patch was already applied in the issue https://www.drupal.org/project/antibot/issues/3057534

I'll close this issue

danrod’s picture

Status: Needs review » Closed (duplicate)