Add honeypot field to login form: instant 24h IP ban on autofill

2026-09-12 00:40:29 +03:00
parent 2c7ec17c8b
commit d5359dd31f
3 changed files with 6 additions and 1 deletions
@@ -10,7 +10,7 @@ async function doLogin() {
    const res = await fetch(`${API}/api/auth/login`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ username, password }),
+      body: JSON.stringify({ username, password, website: document.getElementById('hpWebsite').value }),
    });
    const data = await res.json().catch(() => ({}));
    if (res.ok && data.token) {