Skip to content
This repository has been archived by the owner on Feb 9, 2022. It is now read-only.

Prevent bots from posting jobs #2

Open
imacrayon opened this issue Jan 27, 2020 · 2 comments
Open

Prevent bots from posting jobs #2

imacrayon opened this issue Jan 27, 2020 · 2 comments
Labels

Comments

@imacrayon
Copy link
Collaborator

imacrayon commented Jan 27, 2020

I'm assuming bots will eventually find the "Post a job" form. We can lock this down by implementing something like Spatie's Honeypot package.

Additionally rate limiting the endpoint that creates job postings could help too. Limiting it to something like 5 requests/hr feels reasonable to me 🤷‍♂

@br0xen
Copy link

br0xen commented Feb 27, 2020

A verification link sent in the email with the edit link could get the job done too, maybe. Or it could just be an added check.

@southekal
Copy link

there are also free tiered captcha services - re/hcaptcha that is part of the job posting form.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

3 participants