Security issue: Spam over /index.php/lists/XYZ/subscribe

[p.am]

Hi,
we have spam issues over a certain URL because it allows direct POST-Requests.

The system has the ability to create subscribe forms. All these forms post their data to this URL: "/index.php/lists/XYZ/subscribe". The issue with that is, that bots easily mass-post email addresses to that URL and spam mails get saved to the database.

The url "/index.php/lists/XYZ/subscribe" needs some type of spam protection like Google ReCaptcha or at least a honeypot.

Please fix.

 

[twisted1919]

@p.am - recaptcha is already available in your app, enable and configure it.

 

[p.am]

@p.am - recaptcha is already available in your app, enable and configure it.

Thank you.
We did not know that ReCaptcha comes over an extension. After enabling and configuring everything works fine.
Problem solved.