Honeypot-Feld
Field name
bookmarkVisibility Hidden via CSS (visually-hidden + aria-hidden)
A non-empty value in this invisible field is a high-confidence bot signal.
Missbrauchsschutz
Aktive Verteidigung gegen Missbrauch — Captcha, Honeypot, Rate-Limits, KI-Budget.
Mindest-Ausfüllzeit
Minimum fill time
2000 msRenders timestamp injected at
load time, validated server-side on submitSubmissions faster than the minimum are silently rejected — same response shape as a successful submit.
Geschützte Endpunkte
- Public feedback form
src/routes/(public)/feedback/+page.server.ts
Auth flows use ALTCHA instead — honeypot covers unauthenticated form posts.
Geht dieses Pattern noch besser? Sag uns, wie.
Feedback geben