Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When HoneyPot trap is sprung it still shows the success message/page #911

Closed
mistyn8 opened this issue Nov 11, 2022 · 1 comment
Closed

Comments

@mistyn8
Copy link

mistyn8 commented Nov 11, 2022

When testing recaptchav3 via a junkfiller, noticed the honeypot functionality was triggered, but this still processes the submit workflow (message or page) is shown (302 rather than a 200 status).

Is that the correct functionality (doesn't process any other workflows or save the submission in the entries) or should it report an error?

Perhaps the hope is that the bot moves on thinking it has done its work?

Also, I can't see that it logs the honeypot having caught its victim, which would be good to see if there is a problem with bots targeting the site?

@AndyButland
Copy link

I've checked over this and what you describe does look to be the intention of this feature - i.e. the form looks like it's been submitted, but actually hasn't. A line written to the log would make sense, so we'll add this for the next releases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants