Are there Captcha solutions for the login and register pages?

[Bild] Bitweb Core: yes captcha no change anyting , but it will protect from some kid hacker who try make 100 account with simple browser macros and protect from ddos restore password and login page via sending many post requistes. No, there are rate limits by IP. If you believe this is possible, try it! Go ahead! (Now if you have access to 50,000 IP addresses, then yes, that’s a problem, but you also have a lot of money and time. Do you have that amount of money and time?) That being said I fully support captcha plugins for sites that want double plus good “belt and suspenders and a jumpsuit and a motorcycle helmet and football shoulder pads too” level protection, but the captchas have gotten very very weird lately.

and about users api [image] I need change it to it go to my site ? and anoher qustion , when i can edit blog. links global what puted every where

I’ve not seen that. I think because the password length restrictions make them unnecessary. Have you experienced a problem?

what ? :slight_smile: read question i ask about the cpacha solution - no matter google or another for prevent register spamers . next i was asked abou the api , i need there put own link to api ? or use standart qustion was about the blog.official as it display at many places , can i edit it or that will see only admins and users will no see that redirect to the blog ?

I’ve not seen a captcha option for the signup/create modals either (though that could be my terrible search skills :slight_smile:). If you’re worried about spammers there’s the Akismet plugin you can use alongside the built in tools? I’m not sure what you mean by question 2 or question 3. :slight_smile:

[Bild] JammyDodger: I’m not sure what you mean by question 2 or question 3. :slight_smile: I’m not sure about 3, but I think I know what @Bitweb_Core is trying to ask in 2. @Bitweb_Core unless you want to disable the user API keys completely or limit them based on trust level (which I recommend against this personally), you don’t need to change anything in that section. The defaults allow the DiscourseHub mobile application to work with your instance. The only other time you would need to make changes there is if you or someone working for you was developing a 3rd party application that uses the User API key system.

the problem is not even in spam, but in the fact that thousands of accounts can register automatically, or people can try brute login page. Normally, the login, registration and password recovery pages should be captcha protected. and the solution that you suggested is already treating the symptoms and not the cause. I have a question for what reason there is no such standard thing as a captcha or just a “question - answer” by default. I thought the presence of captcha was not even discussed and logical on the modern Internet. allow only social logins, create white lists of email providers, I think is not a solution. Why invent crutches in the form of incomprehensible services that no one needs, when captcha was invented for this and everything else is already as additional options if 1 line of defense is broken. i was find one solution there GitHub - klaudgrave/discourse-google-recaptcha: Adding Google Recaptcha to sign up form · GitHub but it seems that it has not been working for a long time and is not supported due to forum updates. but I can’t find any documentation on the plugins what they need to work properly. To fix the found solution or write my own. and how i can allow users only use long passwords line 12 min and all character set. Andalso add to register page an inscription above the password for users so that they use a unique password and not the same on all sites.

Here’s some discussion about captcha: Only allow user profiles for TL1 and above? - #24 by codinghorror It seems that no hosted sites need it, so you probably don’t either Here’s why [Bild]Why do new users need to click an extra button to Activate their account? (Reminder, most spammers are 100% human these days so captcha does nothing but it’s certainly possible to add with plugin or maybe a theme component.

yes captcha no change anyting , but it will protect from some kid hacker who try make 100 account with simple browser macros and protect from ddos restore password and login page via sending many post requistes. akismet is more 2 wall of protect , from monsters like hrumer based software and any ai. from bad ips , it have already one captcha from cloudflare. But i how i say that all need use at complex , captcha work for what it was created. as example even discord channel or tg channel they when users join - they solve simple captcha , then start work anti spam bots like akismet ( i know that is 3rd solutions there to ) why litter the database with dead spammer accounts if they are will be rejectet at registration stage. almost 90% always rejected at captcha . if think like this , why protect the forum at all, you can manually delete spam once a day and clean the database from dead accounts. Why use complex passwords when hackers can steal your database. :smile: “why hammer nails with a microscope”

[Bild] Bitweb Core: and protect from ddos restore password and login page via sending many post requistes. There are rate limits on that.

I thought this one was interesting too [Bild] Protecting against gmail dot trick in Discourse Feature I reverted my change here and instead introduced this new awesome default. https://github.com/discourse/discourse/commit/cbceadf48b60b29fb710586e2b03bde4c5fe0883 This means that if evil.person+77@gmail.com gets blocked we will go ahead and block evilperson@gmail.com instead. Then when e.v.i.l.person@gmail.com tries to sneak in they will be blocked due to canonical matching. This entirely solves the OP here, and is a very clean and safe change all Discourse instances can benefit from. Going …

Gibt es Captcha-Lösungen für die Login- und Registrierungsseiten?

Produktunterstützung

JammyDodger 12. Juni 2022 um 21:54 11

Ich fand diese auch interessant

Thema		Antworten	Aufrufe
ReCaptcha, how to implement at login? Product Support	6	623	25. August 2024
A recaptcha plugin? Product Support auth-plugins , spam	2	415	20. März 2025
Discourse Captcha Plugin official , included-in-core , captcha	12	2920	22. Juli 2026
Protecting against gmail dot trick in Discourse Feature	86	22720	24. April 2020
How to prevent registration spam Product Support	27	4658	17. März 2025

Gibt es Captcha-Lösungen für die Login- und Registrierungsseiten?

Verwandte Themen