Re: Forms submitted by bots

2019-12-14 Thread James Bennett
Since this discussion seems to be exclusively about how to use Django, please take it to the django-users mailing list; the django-developers list is not an appropriate place for this topic. -- You received this message because you are subscribed to the Google Groups "Django developers

Re: Forms submitted by bots

2019-12-14 Thread Jure Erznožnik
We're using django-recaptcha (google recaptcha) and it requires a single checkbox click for most "ordinary" users. Some do have to go through a more complex image-identification process, but that one is a few seconds, not 30. Lp, Jure On Sat, 14 Dec 2019, 14:29 אורי wrote: > Hi, > > I'm

Re: Add an --unapplied option for showmigrations

2019-12-14 Thread Adam Johnson
Sure, feel free to open a PR and mention me in a comment with "@adamchainz" so I see it. On Sat, 14 Dec 2019 at 23:09, Sky Christensen wrote: > Thanks Adam - I hadn't come across that, and think it's what I'm after. > > Would it be worth adding a note about this to the "showmigrations" >

Re: Add an --unapplied option for showmigrations

2019-12-14 Thread Sky Christensen
Thanks Adam - I hadn't come across that, and think it's what I'm after. Would it be worth adding a note about this to the "showmigrations" section of the docs? It strikes me that that's the place people would look for an answer to the question "How can I see a list of just the unapplied

Re: Forms submitted by bots

2019-12-14 Thread Matemática A3K
On Sat, Dec 14, 2019 at 9:25 AM Tom Forbes wrote: > IMO this is outside of the scope of this mailing list. There is no simple > answer to this problem, nor a general solution. There is however a wealth > of information on this topic that you can find with a few Google searches. > I agree > If

Re: new to contributing to open source

2019-12-14 Thread Jonathan Jackson
Hi all I a just beginning to learn Django today and I would like to get involved with the community. Let me know how I can help out. I will join the IRC so to. On Friday, November 29, 2019 at 7:41:13 AM UTC-5, Shruti Satish wrote: > > please point me to new and relatively easy bug fixes and

Re: Sounding out for GSoC 2020.

2019-12-14 Thread Andrew Godwin
Here's my take on each of these, leaving out async as that'd be more dependent on where we were: Secrets Manager Many environments Django is deployed in use a separate secrets manager to store and provide secrets per environment - either as environment variables, files, or via a direct HTTP API.

Re: Forms submitted by bots

2019-12-14 Thread Tom Forbes
IMO this is outside of the scope of this mailing list. There is no simple answer to this problem, nor a general solution. There is however a wealth of information on this topic that you can find with a few Google searches. If there is something we can do to Django to make it easier to integrate

Re: Forms submitted by bots

2019-12-14 Thread Jason Johns
We use Signal Sciences at work, integrated with nginx I'm looking for a solution which will be zero time wasting for human users, > not even clicking on the recaptcha's button, but on the other hand will > prevent bots from submitting the form > welcome to

Re: Forms submitted by bots

2019-12-14 Thread אורי
Hi, I'm looking for a solution which will be zero time wasting for human users, not even clicking on the recaptcha's button, but on the other hand will prevent bots from submitting the form. I'm not sure how this can be implemented technically. But right now the "no bots" field I added prevents

Re: Forms submitted by bots

2019-12-14 Thread '1337 Shadow Hacker' via Django developers (Contributions to Django itself)
We had the same problem and didn't want to use recaptcha because it's too hard for some users (ie. senior users). So, we used django-simple-captcha, but that didn't stop some of the bots. Our SecOps produced automated captcha parsing scripts so that we could fine-grain configuration, and found

Re: Forms submitted by bots

2019-12-14 Thread Adam Johnson
Preventing bot submissions is a bit of an arms race. Django could add some protection but if many Django sites use it then bot scripts might be adapted to workaround it. I've had success using django-recaptcha in the past: https://github.com/praekelt/django-recaptcha . django-honeypot looks good