{"id":18326259,"date":"2025-02-25T03:43:12","date_gmt":"2025-02-25T03:43:12","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/only-validates-client-side\/"},"modified":"2025-02-25T03:43:12","modified_gmt":"2025-02-25T03:43:12","slug":"only-validates-client-side","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/only-validates-client-side\/","title":{"rendered":"Only validates client-side"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The code this is based on (ebcaptcha), and thus this plugin, only disable the submit button in client-side JavaScript. For humans, this is easily bypassed using the DOM inspector. For bots, it has no effect at all because they POST form data directly, and don&#8217;t actually use the form like human would. There is no server-side validation. This makes forms appear to be protected, and slows down real humans, but fails at its primary purpose.<\/p>\n","protected":false},"template":"","class_list":["post-18326259","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18326259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18326259\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18326259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}