The verification code triggers related functions

Created on 9 May 2024, about 2 months ago
Updated 10 May 2024, about 2 months ago

Hello,

Does the target of this module have this function? The verification code is triggered or prohibit ip for a period of time when a single visitor frequently visits a web page within a certain period of time.

Thank you

✨ Feature request
Status

Active

Component

Miscellaneous

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @msn5158
  • Status changed to Postponed: needs info about 2 months ago
  • πŸ‡©πŸ‡ͺGermany C-Logemann Frankfurt/M, Germany

    > The verification code is triggered

    Which code you mean? Do you think about an additional setting of firewall or something else? And generally on which way this code is or should be provided to the request?

    Generally about IP blocking and the firewall module. On a first step we only operate on a layer where we won't communicate with the database. There are already core and contrib modules doings such things like "flood".

    In any case there will be a way to log IPs when blocked by this module. So the linux tool fail2ban can recognize and can manage blocking on linux firewall which is way more effective than blocking IPs at Drupal.

  • Sorry, my English is not good, I should say captcha, not verification code, Like this recaptcha β†’

    I have searched for many related modules, but they are all just blocking forms submit, What I hope for is to trigger captcha when a visitor visits a large number of pages in a short period of time, not submit forms.

    Thank you

  • Status changed to Active about 2 months ago
  • πŸ‡©πŸ‡ͺGermany C-Logemann Frankfurt/M, Germany

    I'm also not a native speaker. But I now have an idea what you mean.
    Yes, the most problems cam from forms and there we should operate to make Drupal safer.
    I believe also captcha modules are doing some logging. And especially when using syslog core module you can handle this with fail2ban: https://en.wikipedia.org/wiki/Fail2ban
    If fail2ban is not usable there is the core module "ban" which can block IP addresses:
    https://www.drupal.org/docs/8/core/modules/ban/overview β†’

    If not yes available you need a connection between ban and your preferred captcha solution. But this is not in ficus of this module.

Production build 0.69.0 2024