Discussions

Ask a Question
Back to All

How to Avoid Public Submissions Accepted on All Paths?

(edited)

It seems Locomotive accepts public submission POST requests of any content_type to any path.

Is there a way to change this behavior so that form submissions only work with the public submission url (/entry_submissions/<content type slug>)?

This way, we can easily lock out spam bots which don't run javascript.

Admin(edited)

Yup, I'm also struggling with this, particularly with the default sign_up user authentication form. Brand new site and we got 800+ spam registrations in 3 days. Had to shut it down.

Google reCAPTCHA can be implemented on standard content_type forms if you're using model_form but the auth sign_up form doesn't use model_form so this is proving difficult...