2025-08-15 UTC
# 
gRegor I've been getting regular form-spam submissions on my passwordless sign-in page. Trying to avoid captchas and the like, so I've started tracking IPs and denying them after a set number of failures. I have CSRF and a honeypot field on it, which catch some, but seem to catch a lot less than in the past.