Table of Contents

Web Security - Fake Form Submission (Signup,..)

About

Spam or fake form submissions can be made by:

Example of form:

Fake form submission happen due to bots that scour the internet looking for signup forms to fill in.

Most fake account/sign up are created by two bots:

Why ?

Fake accounts:

The newsletter signup can be hijacked by bots to send emails en mass to apparently valid email addresses causing:

causing the server to be Email - Mille and one way to send an email (professional and user)

Protection

Spambot

Protection may be used due to the specific behavior of this bot. See bad bot protection

CSRF Token

CSRF token

Data Validation

Spambot are not really good at data generation and a simple data validation is another layer of protection.

Name Validation

To block the creation of fake account, there may be ruled on the name.

For instance, Facebook

Email Address validation

See Email - Address Validation

Documentation / Reference