What this solution does
The WACS: AntiBot module version 2.1.3 and above requires PHP 7.4 or higher for testing. Functionality and error-free operation on PHP 7.3 and below are not guaranteed. If testing on older PHP versions is required, contact the developer.
The solution reduces spam bot registrations, blocks brute-force password attempts, lowers load generated by hits containing phishing links, and decreases spam volume on forums and blogs. The system checks the email address during registration and the visitor's current IP address against the WACS: AntiBot database. Verification occurs on the first session hit, during redirects, at the moment of user registration or authorization, and when attempting to post a message or comment. If the IP address or email is found in the database, the registration, authorization, or content submission process is terminated, and the user receives a notification prohibiting such actions.
When active response is enabled, the module adds the attacker's IP address to a block list if the Web Analytics component is installed, or redirects the visitor to a resource that serves as a source of illegal activity. This reduces the server load generated by numerous requests and significantly decreases the number of calls to the external service, which is important for paid plan users.
WACS: AntiBot triggers exclusively during user registration and login, when saving a message or comment, on the first hit of a session, and on hits via redirect links. At all other times, the module performs no operations and imposes no load.
The module communicates with an external service that maintains a database of bot IP addresses and email addresses.
For the “WACS: AntiBot” module, General iT can perform installation, configuration and a functional check in your project.