Hacker News new | ask | show | jobs
by freitasm 635 days ago
I run a forum, so there is a higher chance of spam attempts.

We confirm emails before creating an account. Visitors fill out a form with their email address and receive an email containing a URL with a hash of their salted email, which is the actual registration form.

Emails will not be sent to temporary email addresses, which we check using the DeBounce API. We also don't send emails if the IP address is a proxy, which is checked against another API. We also check the StopForumSpam API.

The request and registration forms are protected with Cloudflare Turnstile.

We also block registrations from a list of countries that are not a focus of our content.

I used to have Google reCaptcha v3, which returns a score. Scores above a specific value were rejected. I stopped using Google's service when they unveiled plans to charge with a low threshold for the free tier.

If you want to use the forum, you will register. If not, good.