Hi @eitanc,
That’s because the Unsubscribe is already a two-step process:
1. Confirmation page: the first page displayed will ask the subscriber to confirm they want to be Unsubscribed from the list;
2. Success page: the second step shows a confirmation that the subscriber has been successfully unsubscribed.
So the subscribers need to click on a link to confirm they really want to unsubscribe, preventing bots from automatically unsubscribing your subscribers.
Thank you!
Thread Starter
eitanc
(@eitanc)
Yes, but this is not the correct view of things.
Your current process will prevent unintentional or malicious subscription cancelation, but will not prevent bots from flooding and thus harassing the subscribers with canceling approval emails nor will it block bots from trying to guess email address and so overload the site.
You already support captcha – just add it to this form, very simple, and you have a more correct and strong security.
If you wish – you can have a setting check box to let admins decide if to show it or not.
Please add it.
