What this solution does
The multi-layer form anti-spam module operates locally on the server without requiring external services like Google reCAPTCHA or Yandex SmartCaptcha. Visitors are not required to complete a CAPTCHA challenge.
The system automatically blocks spam in web forms and contact forms using a set of algorithms: token verification, honeypot traps, user behavior analysis, content filtering, and blocklists.
The module protects standard Bitrix forms (main.feedback, web forms) and allows protection to be connected to any custom forms via API. This effectively secures spam channels in contact forms and 'Request a Call' forms.
When data is submitted, the system checks the content for malicious code, suspicious links, stop words, and signs of SQL or HTML injection. Submission is blocked if threats are detected. Configuration supports custom stop words and a limit on the number of URLs in the message.
The solution also includes protection against fake registrations and disposable email addresses.
The module blocks registrations containing suspicious data, such as links to external sites in user profiles and disposable email addresses. Protection covers registration, password recovery, and, if required, authorization.
The component integrates with web forms, comment sections, reviews, and, if needed, the checkout process. Protection can be flexibly enabled or disabled for each form type.
The system maintains statistics on blocked requests, including the count of rejected queries, applied rules, and assigned scores. The event log allows analysis of spam attempts and enables adding IP addresses or email addresses to the block list when necessary.
The module operates without external services like Google reCAPTCHA or Yandex SmartCaptcha. It supports black and white lists based on IP addresses and email addresses. Installation requires no API keys or code modifications.
Compatible with PHP versions 7.x and 8.x. Supports multisite configurations, as well as composite and auto-composite modes. The product works on current and older versions of 1C-Bitrix starting from version 18.5. An API is provided for protecting custom forms.
General iT can install and configure this module and check how it works on your website.