6

We recently launched our first site with front end user registration and we are getting a lot (not a ton, like 5 a day) spam registrations. See here:

Spam accounts

Im trying to find a way to cut down on these without doing something like a captcha but maybe thats my only option?

Keith Mancuso
  • 2,421
  • 16
  • 27
  • Hey, we have some of those same users =). Are you just using native Craft login functionality or any plugins to allow social sign on? I've been resisting implementing a solution to our problem while I try to figure out where these spam users are coming from as they don't seem to trigger the expected Craft events. – Ben Parizek Jun 21 '14 at 19:16
  • yea it just native user registration, no plugin involved yet. It seemed odd to me as well that most are from the same source. Anyways looks like i'll need to add a plug of some sort or at least turn auto activation back off – Keith Mancuso Jun 21 '14 at 19:23

1 Answers1

4

Plugins:

  • Snaptcha (private beta)
    Works with the User Registration Form, Contact Form Plugin and Sprout Forms Plugin

  • Invisible Captcha (private beta)

.

Config:

If you don't mind having a few spam-users in your list. Just add purgePendingUsersDuration to your config.

This will purge all users which haven't been activated for x time.

Victor
  • 8,376
  • 1
  • 34
  • 61
  • It would be pretty slick if someone made a honeypot plugin as well. – Bryan Redeagle Jun 22 '14 at 18:15
  • 1
    @BryanRedeagle 'Invisible Captcha' has a Honeypot option: http://sprout.barrelstrengthdesign.com/craft-plugins/invisible-captcha/docs/getting-started/introduction#invisible-captcha-methods-available – Victor Jun 22 '14 at 18:32