Help with preventing spam user registrations
We've recently upgraded to 27.3 (https://astrobetter.com/wiki
) and whatever we were using to block spam user registrations stopped working. I've been having a heck of a time configuring something that works.
Couldn't get to work:
- For reasons which I cannot explain, ReCaptcha v2 and v3 still allowed multiple fake registrations over the course of a couple hours.
- I also experienced the same problem described in https://tiki.org/forumthread79742-Registration-Captcha-Broken
- I tried to turn the Tracker back on. (We've used one in the past) But could never get the tracker form to show up as part of registration. Requiring the tracker also seemed to prevent the registration acknowledgement page from displaying "Your account request has been stored and will be activated by the admin as soon as possible."
- I tried to go down the IP Banning route (https://doc.tiki.org/How-to-Ban-many-IP-from-fake-registrations
), but I don't see user registration attempts in the log.
Currently using:
- Require passcode to register, and show on the webpage. I haven't had this on long enough to see if it prevents the spam registrations, but at least it allows for registrations and displays the acknowledgement.
Questions:
- I'm looking for general advice on the best combination of things to use to prevent spam user registrations. Or information about this all being better in 28 or 29 and motivation to upgrade. Any thoughts would be most welcome. Maybe we can work on an update to this tutorial: https://doc.tiki.org/How-to-Ban-many-IP-from-fake-registrations
- Is it possible to see user registration requests in the Action Log in v27? I really can't seem to get that information to display. Any advice here would be welcome.