Skip to content

2.1.2 - opt-in Cyrillic requirement for names

Latest

Choose a tag to compare

@paulmann paulmann released this 04 Nov 09:43
· 4 commits to main since this release

PHP Form Spam Checker 2.1.2 adds an opt-in locale check for Russian-language forms: a configured name field must contain Cyrillic, a Latin-only name adds missing_score points, and e-mail, company and free-text fields are never checked. language.enabled and language.require_cyrillic default to false and the shipped example configs keep them off; enable the rule in a site's own configuration.

Added

  • Cyrillic requirement for names (language.require_cyrillic): an opt-in
    rule for Russian-language forms. The configured name-like fields (name,
    fio, first_name, last_name, surname, …, case/separator-insensitive)
    must contain at least one Cyrillic letter; a value with letters but no
    Cyrillic adds language.missing_score points. E-mail, company and free-text
    fields are never checked, and language.fields, min_letters and max_score
    tune the rule.
  • The rule is disabled by default (language.enabled and
    require_cyrillic are false) and is enabled per site only where it is
    wanted: 'missing_score' => 60 makes a Latin-only name alone reach the spam
    threshold, 40 keeps the verdict at "suspicious".

Release correction (documented, not silent). This release replaces the 2.1.2 assets published earlier on 2026-11-04 from commit aea672a. That archive already shipped the rule disabled by default, but its release notes and README described it as enabled in the reference deployment configs; the wording is corrected and the archive is rebuilt from commit 6a38c45 (which also fixes a flaky process test whose cache cleanup could delete its own config file). Superseded asset: php-form-spam-checker-2.1.2.tar.gz sha256 dce99231edcbc5a00c2cd78a99d720089f27ea2ecc1f58b0b99adcaebb351d25.

Verification. CI (PHP 8.5.12 and 8.5) and the repository gates are green on the tagged commit; the suite runs 560 tests and asserts the default-off behaviour. The source archive is produced by git archive; its SHA-256 is in SHA256SUMS.txt and was re-verified after upload.