Honeypot Ajax

Categories

Component ID

2820391

Component name

Honeypot Ajax

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Component created

Component changed

Component body

Sandbox for a Honeypot helper module. This module allows time limit protected forms on cached pages for anonymous users.

Serverside, the module sets the honeypot time limit so that 25 hours must pass before the form can submit, and it turns page caching back on for the page with the form. On page load ajax updates the form to the time limit in the Honeypot configuration. This allows the page to be cached.

Because pages with forms protected by this module are cached, only anonymous users are presented with the Honeypot challenge. The Honeypot module used alone, however, provides form protection by role for authenticated users and a permission to bypass that protection. Pages with at least one form protected by Honeypot Ajax will be cached, and Honeypot's bypass permissions will be automatically granted for all authenticated users.

Note: Bots (and humans) without javascript will fail. Anyone with js enabled and speed submitting the form will fail.