@gotwf pardon the late response, I've adopted your suggestion, thanks! 👍
Hopefully it stays that way so I can focus on content 😇
I'm curious to know, does NodeBB offer something to prevent spambots from registering? E-mail activation could a good measure too.
Until then I'm manually deleting spam users, but oh boy they're piling up fast.
Yep, manual deletion is the only solution at this time.
Even something as basic as a hidden form field that when filled out denies registration would stop most of the registration bots. It would do nothing to the human operated ones, but the automated ones are the more annoying ones, IMO.
@chris We have a CSRF in place for both register and login
They don't seem to be stopping bot registrations. I know they can't post, but maybe the good part is it's a boost to the number of registered users.
Actually I don't see any antispam solution for node.js except yandex cleanweb which I saw somewhere.
On a side note, how are total users counted? Deleting users doesn't seem to lower the count just saying.