# Form Spam Security

**URL:** <https://community.fibery.io/t/form-spam-security/7775>\
**Category:** Misc\
**Created:** [November 12, 2024, 6:46pm UTC](https://community.fibery.io/t/form-spam-security/7775 "2024-11-12T18:46:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wilco\_Boode](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/wilco_boode/32/9985_2.png) [@Wilco\_Boode](https://community.fibery.io/u/Wilco_Boode)\
**Post date:** [November 12, 2024, 6:46pm UTC](https://community.fibery.io/t/form-spam-security/7775/1 "2024-11-12T18:46:09Z")

</div>

I wondered whether the Fibery Forms are protected against any form of spam attacks?

We want to create some public forms, but it would suck if these get abused for spam attacks. We experienced spambot on our own products (not fibery) in the past, and we were curious if fibery has any active protection against these types of attacks.

---

<div class="post-metadata">

**Author:** ![Chr1sG](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/chr1sg/32/3941_2.png) [@Chr1sG](https://community.fibery.io/u/Chr1sG)\
**Post date:** [November 12, 2024, 8:45pm UTC](https://community.fibery.io/t/form-spam-security/7775/2 "2024-11-12T20:45:30Z")

</div>

We currently have no mechanism for preventing spam attacks. Thankfully, we haven’t yet heard of them being abused.  
If you wanted, you could add a field to the db and require submissions to enter a (correct) value in this field, and then warn users to use the right ‘code’.  
Any entities created without an internal author and without a valid code can be deleted.  
Alternatively, you could have a [qualified URL](https://the.fibery.io/@public/User_Guide/Guide/Set-Initial-Field-Values-via-URL-Parameter-on-Form-View-246) that you share with users, which does the same thing for a hidden field, and then anyone who accidentally finds the form, won’t be able to make a valid submission.

---

<div class="post-metadata">

**Author:** ![Wilco\_Boode](https://sea2.discourse-cdn.com/flex020/user_avatar/community.fibery.io/wilco_boode/32/9985_2.png) [@Wilco\_Boode](https://community.fibery.io/u/Wilco_Boode)\
**Post date:** [November 14, 2024, 2:41pm UTC](https://community.fibery.io/t/form-spam-security/7775/3 "2024-11-14T14:41:23Z")

</div>

Hi Chris,

Thank you for the info.

I didnt think about using the Qualified URLs yet. I use them for different purposes, and this is a pretty handy option.