feat: honeypot and timestamp checks to form submission

This commit is contained in:
2025-02-22 21:34:45 +01:00
parent a00e8241d2
commit a1c4adc4b1

View File

@@ -18,11 +18,14 @@ export default function Contact() {
message: "", message: "",
type: "success", type: "success",
}); });
// Record the time when the form is rendered
const [formLoadedTimestamp, setFormLoadedTimestamp] = useState<number>(Date.now());
useEffect(() => { useEffect(() => {
setFormLoadedTimestamp(Date.now());
setTimeout(() => { setTimeout(() => {
setIsVisible(true); setIsVisible(true);
}, 350); // Delay to start the animation after Projects }, 350);
}, []); }, []);
async function onSubmit(e: React.FormEvent<HTMLFormElement>) { async function onSubmit(e: React.FormEvent<HTMLFormElement>) {
@@ -31,16 +34,44 @@ export default function Contact() {
const form = e.currentTarget as HTMLFormElement; const form = e.currentTarget as HTMLFormElement;
const formData = new FormData(form); const formData = new FormData(form);
// Honeypot check: if the hidden field has a value, it's likely a bot.
const honeypot = formData.get("hp-field");
if (honeypot) {
setBanner({
show: true,
message: "Bot detected",
type: "error",
});
setTimeout(() => {
setBanner((prev) => ({ ...prev, show: false }));
}, 3000);
return;
}
// Time based anti-bot check:
// Read the timestamp from the hidden field and ensure at least 3 seconds have passed.
const timestampStr = formData.get("timestamp") as string;
const timestamp = parseInt(timestampStr, 10);
if (Date.now() - timestamp < 3000) {
setBanner({
show: true,
message: "Please take your time filling out the form.",
type: "error",
});
setTimeout(() => {
setBanner((prev) => ({ ...prev, show: false }));
}, 3000);
return;
}
const data: ContactFormData = { const data: ContactFormData = {
name: formData.get("name") as string, name: formData.get("name") as string,
email: formData.get("email") as string, email: formData.get("email") as string,
message: formData.get("message") as string, message: formData.get("message") as string,
}; };
// Convert FormData to a plain object
const jsonData = JSON.stringify(data); const jsonData = JSON.stringify(data);
//prevent multiple submissions
const submitButton = form.querySelector("button[type='submit']"); const submitButton = form.querySelector("button[type='submit']");
if (submitButton) { if (submitButton) {
submitButton.setAttribute("disabled", "true"); submitButton.setAttribute("disabled", "true");
@@ -65,6 +96,7 @@ export default function Contact() {
}, 3000); }, 3000);
} }
} }
return ( return (
<section <section
id="contact" id="contact"
@@ -76,12 +108,27 @@ export default function Contact() {
<div className="flex flex-col items-center p-8 bg-gradient-to-br from-white/60 to-white/30 backdrop-blur-lg rounded-2xl shadow-xl max-w-lg mx-auto mt-6 relative"> <div className="flex flex-col items-center p-8 bg-gradient-to-br from-white/60 to-white/30 backdrop-blur-lg rounded-2xl shadow-xl max-w-lg mx-auto mt-6 relative">
{banner.show && ( {banner.show && (
<div <div
className={`absolute top-0 left-0 right-0 text-white text-center py-2 rounded-2xl animate-fade-out ${banner.type === "success" ? "bg-green-500" : "bg-red-500"}`} className={`absolute top-0 left-0 right-0 text-white text-center py-2 rounded-2xl animate-fade-out ${
banner.type === "success" ? "bg-green-500" : "bg-red-500"
}`}
> >
{banner.message} {banner.message}
</div> </div>
)} )}
<form className="w-full space-y-4" onSubmit={onSubmit}> <form className="w-full space-y-4" onSubmit={onSubmit}>
{/* Honeypot field: should remain empty */}
<input
type="text"
name="hp-field"
style={{ display: "none" }}
autoComplete="off"
/>
{/* Hidden timestamp field to check how fast the form was filled */}
<input
type="hidden"
name="timestamp"
value={formLoadedTimestamp.toString()}
/>
<input <input
type="text" type="text"
name="name" name="name"