Add ability to bypass Honeypot by IP

Created on 22 October 2015, about 9 years ago
Updated 12 June 2023, over 1 year ago

After switching to Honeypot, we ran into a problem where legitimate form submissions were being blocked because we are on a large network with dozens of IP addresses, each of them with dozens of computers.

What happened was that two people might (legitimately) submit the same form within a few seconds of each other, so the second person would get the error message about waiting to try again. If s/he tried again, the wait time would increment. Meanwhile, another person at the same IP address would (legitimately) submit the form, unaware of what the previous person had run into, and as a result the wait time would increment again. From there the problem would just snowball until we were into wait times of e.g. 1,100 seconds.

Since there wasn't a way of whitelisting our own IP addresses, we just turned off the Honeypot time limit.

Would it be possible to add a feature to let an admin whitelist certain IP addresses?

Feature request
Status

Needs work

Version

2.1

Component

Code

Created by

🇺🇸United States johnofjack

Live updates comments and jobs are added and updated live.
  • Needs tests

    The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024