Prevent Spam on Public Apps

Hey there! I was hoping to get some guidance on an app I am working on. I have a public app, no sign-in required, and users can create rows (via a form) to request bookings. As you can imagine, that’s an open door for spam and bot submissions.

Question: Is there any way to limit submissions to prevent bots or spam? E.g., Captcha, Limit submissions from the same IP within X minutes. Any other ideas?

Enabling sign-in is not an option, as I expect multiple submissions by different users, and I don’t want to hit user limits.

Thanks so much!

1 Like

It’s unclear to me if the bot/spam filters we experience online are security features or simply user experience components that are difficult for non-humans to use. I think it would be hard to build the former but possible to build the latter.

It would be easier to build in a custom form I think.

Ideas that come to mind:

  1. Set a visibility condition on the submit button.
  2. The visibility condition would be conditioned by the user successfully performing a task.
  3. Task could be simple math (“What is 2+3 ?”) or typing a word or string of characters displayed (“Type the following word: efsdghur”) or ticking a checkbox.
  4. In the table, a column with the correct answer and a column with the submitted answer by the user world be compared and used in the visibility condition. The condition on the checkbox would be the simplest.

I hope these ideas might get you started.

There was a bit of discussion in this thread.

I think the bottom line is there would always be workarounds if they want to spam your site, you do the best you can to contain them.