Regarding the form - are there any ideas so far to protect public forms from spam submissions? Whenever there are public forms, some day bots will show up and hammer your form with spam.
In the past we used approaches like:
- simple calculation task, that a user needs to solve (enter the result of 7+3).
- hidden fields, which - when filled - will mark the form submission as spam,
- embedding bot detection scripts,
Long term - and depending on type of the form - only variant 3 will substantially work. Given the many different providers, probably some custom code field could work.
Is there anything server side, that prevents bots? As its an iframe you control the server. Something like only x submissions from the same IP within timeframe y already is a great method to stop spam (spammers don’t have time to wait).
(more background also in the Forum post: Be careful with public forms // danger of backscatter spam)
To be clear - I haven’t experienced it in Tape yet. But I want to help prevent it to happen 