Honeypot Fields for Bot Prevention on Signup?

[Carlo]

Hi

I’m looking to add a honeypot field to the signup form to block bots. The idea is to create a hidden field like “Phone Number” or “URL” (hidden via CSS), and if a bot fills it, the registration is blocked.

Would this be possible using custom user fields? If so, how would I go about implementing it?

I came across this thread, but I’m not sure if it can be used for this purpose.

Creating and configuring custom user fields

As URLs are text, the text field technically works, @Vaping_Community. However, you may be asking for additional details such as value validation or similar. You might search or create a #feature topic with what you have in mind.

Thanks !

[Andrew_Rowe]

I think there was some work recently done with being able to alter the sign up form. Dig around a little bit, I can’t find it quickly but I think what you are wanting to do should be possible

[david (David Taylor)]

Discourse core already has a hidden ‘honeypot’ system in the signup forms, so I don’t think you’ll be able to gain much by adding an additional one.

app/assets/javascripts/discourse/app/components/modal/create-account.hbs

[Andrew_Rowe]

This post might help

Add custom registration question to prevent spam signups

If you’re looking for a simple text box rather than an auto-validate check, I think you should be able to do that using the /admin/customize/user_fields: [customise user fields] [user field options] [create account] [approval in review queue]