A Laravel package that prevents spam using honeypot fields and form submission timing validation.
Honeypot is a Laravel package that prevents spam submissions in web forms using the honeypot technique. It adds hidden fields that legitimate users ignore but spam bots often fill, combined with timing validation to detect automated form submissions. The package provides custom validation rules that integrate seamlessly with Laravel's validation system.
Laravel developers building web applications with forms that need protection against spam bots without implementing CAPTCHA or other user-facing challenges.
Developers choose Honeypot because it provides effective spam prevention without inconveniencing real users, integrates easily with Laravel's validation system, and offers a lightweight alternative to more complex solutions like reCAPTCHA or Akismet.
Simple spam prevention package for Laravel applications
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Provides a facade method Honeypot::generate() to add hidden fields directly in Blade templates, seamlessly fitting into Laravel's form helpers as shown in the usage examples.
Uses invisible fields and timing checks to avoid CAPTCHAs or challenges, aligning with the philosophy of not inconveniencing real users.
Includes a disable() method to bypass validation during tests, simplifying form submission testing in development environments, as documented in the README.
Offers honeypot and honeytime validators that integrate with Laravel's validation system, allowing easy rule addition to form validation with parameters like honeytime:5.
The README suggests using Akismet or reCaptcha for stronger protection, indicating honeypot alone may not stop advanced spam bots that evade basic honeypot fields.
Timing validation (honeytime) flags submissions under 5 seconds by default, which could incorrectly mark fast but legitimate users as spam, especially on simple forms.
Designed specifically for Laravel with service provider and facade setup, making it incompatible with other PHP frameworks or custom applications without modification.