Malin c2a29ffbbe feat: honeypot fields v2.0 with JS challenge, rate limiting, and proper WooCommerce hooks ...

- Require honeypot field presence (blocks direct POST bots)
- Add HMAC-based JavaScript proof-of-work token via SubtleCrypto
- Hook into woocommerce_process_registration_errors for proper validation
- Add IP-based rate limiting (3 registrations/hour) via transients
- Add timestamp validation (min 3s, max 2h)
- Use realistic field names to avoid bot detection
- Support WP core registration, comments, Elementor, Gravity Forms, CF7

2026-02-16 09:54:17 +01:00

19 KiB

Raw Blame History

View Raw