The patron selfreg form should record the origin IP in the patron record
To inform the blocking of IP ranges from which bad actors are abusing the /selfreg form, record the origin IP in a varfield or new fixed field on the patron record.
If a varfield, the default of an x-Note would suffice, but make this varfield tag customizable via one of the administrative interfaces. Historically speaking, Admin Corner would have been the go-to place to make this customization.
-
Andy Lechlak
commented
We had to turn off our self reg form because of this issue.
-
Alison Pruntel
commented
Also include CAPTCHA or similar functionality to help mitigate the abuse of the /selfreg form, which is what we're stuck with using at the moment (no account creation via Vega/LX Starter yet).
-
Shawn P. Farrell
commented
This would be incredibly useful. So many bad actors these days, it's like watching an episode of Full House.