Version 1.5.4 I get about 5 to 10 fake accounts (which looks like bots) and noticed the postcode is always a string of letters instead of numbers.
So I added a regex line pattern="^[0-9]{4}$" to the create_account.php file(s). I tested to create an account with a non matching postcode and it wouldn't let me The fake accounts still keep being created with a postcode that doesn't match the regex.
How can that be? Are bots using another means but the create account form to create fake accounts?
Bookmarks