From ac20bff236635aa9232d32c39e8eef24c3dd9548 Mon Sep 17 00:00:00 2001 From: Clayton Dewey Date: Wed, 26 Dec 2018 19:09:55 -0700 Subject: [PATCH] Enable and configure Honeypot --- ...t.snapshot.config_sync.module.honeypot.yml | 95 +++++++++++++++++++ config/sync/core.extension.yml | 1 + config/sync/honeypot.settings.yml | 29 ++++++ config/sync/tour.tour.honeypot.yml | 67 +++++++++++++ 4 files changed, 192 insertions(+) create mode 100644 config/sync/config_snapshot.snapshot.config_sync.module.honeypot.yml create mode 100644 config/sync/honeypot.settings.yml create mode 100644 config/sync/tour.tour.honeypot.yml diff --git a/config/sync/config_snapshot.snapshot.config_sync.module.honeypot.yml b/config/sync/config_snapshot.snapshot.config_sync.module.honeypot.yml new file mode 100644 index 0000000..1643fb9 --- /dev/null +++ b/config/sync/config_snapshot.snapshot.config_sync.module.honeypot.yml @@ -0,0 +1,95 @@ +uuid: 2eacb366-8029-47cf-98af-df5c63666489 +langcode: en +status: true +dependencies: + module: + - honeypot +id: config_sync.module.honeypot +snapshotSet: config_sync +extensionType: module +extensionName: honeypot +items: + - + collection: '' + name: honeypot.settings + data: + unprotected_forms: + - user_login_form + - search_form + - search_block_form + - views_exposed_form + - honeypot_settings_form + protect_all_forms: false + log: false + element_name: url + time_limit: 5 + expire: 300 + form_settings: + user_register_form: false + user_pass: false + feedback_contact_message_form: false + _contact_message_form: false + - + collection: '' + name: tour.tour.honeypot + data: + id: honeypot + module: honeypot + label: Honeypot + langcode: en + routes: + - + route_name: honeypot.config + tips: + honeypot-configuration: + id: honeypot-configuration + plugin: text + label: Honeypot + weight: -10 + body: "Congratulations on installing Honeypot on your site! With just a few clicks, you can have your site well-protected against automated spam bots.\r\n\r\nClick Next to be guided through this configuration page." + location: top + protect-all-forms: + id: protect-all-forms + plugin: text + label: 'Protect all forms' + weight: -9 + attributes: + data-id: edit-protect-all-forms + body: "Protecting all the forms is the easiest way to quickly cut down on spam on your site, but doing this disables Drupal's caching for every page where a form is displayed.\r\n\r\nNote: If you have the honeypot time limit enabled, this option may cause issues with Drupal Commerce product forms or similarly-sparse forms that are able to be completed in a very short time." + location: bottom + log-blocked-form-submissions: + id: log-blocked-form-submissions + plugin: text + label: 'Log blocked form submissions' + weight: -8 + attributes: + data-id: edit-log + body: 'Check this box to log every form submission using watchdog. If you have Database Logging enabled, you can view these log entries in the Recent log messages page under Reports.' + location: bottom + honeypot-element-name: + id: honeypot-element-name + plugin: text + label: 'Honeypot Element Name' + weight: -7 + attributes: + data-id: edit-element-name + body: 'Spam bots typically fill out any field they believe will help get links back to their site, so tempting them with a field named something like ''url'', ''homepage'', or ''link'' makes it hard for them to resist filling in the field—and easy to catch them in the trap and reject their submissions!' + location: top + honeypot-time-limit: + id: honeypot-time-limit + plugin: text + label: 'Honeypot Time Limit' + weight: -6 + attributes: + data-id: edit-time-limit + body: 'If you enter a positive value, Honeypot will require that all protected forms take at least that many seconds long to fill out. Most forms take at least 5-10 seconds to complete (if you''re a human), so setting this to a value < 5 will help protect against spam bots. Set to 0 to disable.' + location: top + honeypot-form-specific-settings: + id: honeypot-form-specific-settings + plugin: text + label: 'Honeypot form-specific settings' + weight: -5 + attributes: + data-id: edit-form-settings + body: 'If you would like to choose particular forms to be protected by Honeypot, check the forms you wish to protect in this section. Most common types of forms are available for protection.' + location: top diff --git a/config/sync/core.extension.yml b/config/sync/core.extension.yml index a15884b..c900206 100644 --- a/config/sync/core.extension.yml +++ b/config/sync/core.extension.yml @@ -77,6 +77,7 @@ module: hal: 0 help: 0 history: 0 + honeypot: 0 http_client_error_status: 0 image: 0 indieweb: 0 diff --git a/config/sync/honeypot.settings.yml b/config/sync/honeypot.settings.yml new file mode 100644 index 0000000..97f95d4 --- /dev/null +++ b/config/sync/honeypot.settings.yml @@ -0,0 +1,29 @@ +unprotected_forms: + - user_login_form + - search_form + - search_block_form + - views_exposed_form + - honeypot_settings_form +protect_all_forms: true +log: false +element_name: url +time_limit: 5 +expire: 300 +form_settings: + user_register_form: false + user_pass: false + contact_message_feedback_form: false + contact_message_personal_form: false + node_action_form: false + node_article_form: false + node_blog_form: false + node_campaign_form: false + node_case_study_form: false + node_event_form: false + node_landing_page_form: false + node_page_form: false + node_people_form: false + node_resource_form: false + comment_comment_form: false +_core: + default_config_hash: 9bVDfWSa_In6VzTXmy04jJ_3ZQobihKjO9isuuUCPaw diff --git a/config/sync/tour.tour.honeypot.yml b/config/sync/tour.tour.honeypot.yml new file mode 100644 index 0000000..fa4dfc1 --- /dev/null +++ b/config/sync/tour.tour.honeypot.yml @@ -0,0 +1,67 @@ +uuid: 60485796-06b7-4b61-bcf3-8f021058b5b6 +langcode: en +status: true +dependencies: + module: + - honeypot +_core: + default_config_hash: eJszwZawaWU6LHIgSykn-OsisG3smruwsKOqx44TUoA +id: honeypot +label: Honeypot +module: honeypot +routes: + - + route_name: honeypot.config +tips: + honeypot-configuration: + id: honeypot-configuration + plugin: text + label: Honeypot + weight: -10 + body: "Congratulations on installing Honeypot on your site! With just a few clicks, you can have your site well-protected against automated spam bots.\r\n\r\nClick Next to be guided through this configuration page." + location: top + protect-all-forms: + id: protect-all-forms + plugin: text + label: 'Protect all forms' + weight: -9 + attributes: + data-id: edit-protect-all-forms + body: "Protecting all the forms is the easiest way to quickly cut down on spam on your site, but doing this disables Drupal's caching for every page where a form is displayed.\r\n\r\nNote: If you have the honeypot time limit enabled, this option may cause issues with Drupal Commerce product forms or similarly-sparse forms that are able to be completed in a very short time." + location: bottom + log-blocked-form-submissions: + id: log-blocked-form-submissions + plugin: text + label: 'Log blocked form submissions' + weight: -8 + attributes: + data-id: edit-log + body: 'Check this box to log every form submission using watchdog. If you have Database Logging enabled, you can view these log entries in the Recent log messages page under Reports.' + location: bottom + honeypot-element-name: + id: honeypot-element-name + plugin: text + label: 'Honeypot Element Name' + weight: -7 + attributes: + data-id: edit-element-name + body: 'Spam bots typically fill out any field they believe will help get links back to their site, so tempting them with a field named something like ''url'', ''homepage'', or ''link'' makes it hard for them to resist filling in the field—and easy to catch them in the trap and reject their submissions!' + location: top + honeypot-time-limit: + id: honeypot-time-limit + plugin: text + label: 'Honeypot Time Limit' + weight: -6 + attributes: + data-id: edit-time-limit + body: 'If you enter a positive value, Honeypot will require that all protected forms take at least that many seconds long to fill out. Most forms take at least 5-10 seconds to complete (if you''re a human), so setting this to a value < 5 will help protect against spam bots. Set to 0 to disable.' + location: top + honeypot-form-specific-settings: + id: honeypot-form-specific-settings + plugin: text + label: 'Honeypot form-specific settings' + weight: -5 + attributes: + data-id: edit-form-settings + body: 'If you would like to choose particular forms to be protected by Honeypot, check the forms you wish to protect in this section. Most common types of forms are available for protection.' + location: top