jobs.devict
jobs.devict copied to clipboard
Prevent bots from posting jobs
I'm assuming bots will eventually find the "Post a job" form. We can lock this down by implementing something like Spatie's Honeypot package.
Additionally rate limiting the endpoint that creates job postings could help too. Limiting it to something like 5 requests/hr feels reasonable to me 🤷♂
A verification link sent in the email with the edit link could get the job done too, maybe. Or it could just be an added check.
there are also free tiered captcha services - re/hcaptcha that is part of the job posting form.