Hello, I'm trying to use QuestyCaptcha for registration due to expensive spam bots.
The current plan is to use registration only with dynamic QuestyCaptcha (using a dynamic algorithm to generate key-value pairs. issuing with community bots. These will be one-use only, so it might look a bit rough).
But I had an idea: if badlogin
or badloginperuser
is triggered, I want to issue hCaptcha or Turnstile. Since registration should proceed smoothly, a badlogin
would only happen if an account were being attacked by bots or something similar, just in case. However, it seems there’s no documentation on this. Is it not possible, or possible but lacking documentation?