Feature request: For Honeypot to offer an option for a more stringent server-side validation.
In particular, have a hidden form field be provisioned by the module (via hook_element_info()) with a unique value (e.g. honeypot_sid). honeypot_sid's will be generated and store in a new table with the following fields:
$honeypot_sid = db_insert(table-name)
->fields(array(
'uid' => $user->uid,
'sid' => session_id(),
'ip_address' => ip_address(),
'timestamp' => REQUEST_TIME,
'form_id' => $form_id,
'status' => $status,
))
->execute();The validate callback would check the form_state values and make sure a valid honeypot_sid was a part of the form values.
Additionally, the feature would disabled page_caching for pages with such a form to avoid re-issuing a honeypot_sid.
Lastly, a theme function for the field would allow it to be customized as needed.
We have a working prototype as a helper module, but we feel it may be a good fit for the module itself.
Closed: duplicate
2.1
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Yes, this is the same as
#3002022: Add server-side unique-ID or unique token validations →
.
Technically, this issue was first, but that other one has a lot of work in it and this one has nothing, so it makes sense to close this one.