My ITS recently noticed that some people are using the registration form on our patchwork servers to send out confirmation emails to random addresses. I was wondering if anyone else had experienced that or had implemented some type of protection against this abuse?

From the looks of the patchwork code, there's nothing built in. However, it does look like we might be able to easily add a captcha type field to the registration form[1]. Would this be something of interest to you guys?

1: https://tryolabs.com/blog/2012/03/02/django-adding-captcha-validation-forms/
_______________________________________________
Patchwork mailing list
[email protected]
https://lists.ozlabs.org/listinfo/patchwork

Reply via email to