Hi
I’m trying to find out why my clients regularly is getting empty entries on some of their forms.
At first I thought it was because they didn’t have any “required” attributes on their input fields (they only had js-validation) so bots must have posted the forms but the problem still persist after I’ve added required attributes. They also have a recaptcha field who should block bots from spamming even if they were smart enough to bypass html5 validation.
One thing I find weird is that there’s a hidden field that’s populated via an api call to one of their services (they have a workflow that post the form to their CRM) and that field is also empty. That field should always be populated if you visit the page where the form is (the call is being made in Form.cshtml). I suspect that bots are posting the form without visiting the page in question.
Is there a way to add more security that I haven’t thought about?
This is for Umbraco 12.3.6 with Forms 13.01 hosted in Umbraco cloud.
This is a companion discussion topic for the original entry at https://our.umbraco.com/forum/113457-umbraco-forms-empty-entries