Skip to main content

Form Security

Learn about why Donorfy blocks suspicious requests and how to allow or block them.

Cristina Gruita avatar
Written by Cristina Gruita
Updated this week

We monitor requests made to web widgets and forms to:

  • Identify and block suspicious requests.

  • Block automated form submissions - i.e. submissions from spambots.


Identify and Blocking Suspicious Requests

If the pattern of requests from a source looks suspicious Donorfy will initially restrict the number of requests responded to. If Donorfy continues to receive suspicious requests, all requests from that source will be blocked and the administrator users in your Donorfy will be emailed and notified.

You can then decide whether to keep the block in place or allow requests from that source.

๐Ÿ“ŒNote:

Donorfy uses IP addresses to track the source of requests. IP addresses are numbers allocated to computers using the internet, similar to how a postal address identifies a house or building, an IP address identifies a computer.

Blocking Automated Form Submissions

When the form is submitted Donorfy uses various checks to determine whether the form appears to have been submitted by a real person rather than a spambot. If the form appears to have been submitted by a spambot Donorfy will mark it as spam:

  • Spam forms will not be processed.

  • You can view details of spam forms by clicking on them.

  • Spam forms are automatically deleted after 30 days.


Allowing and Blocking Requests

Request rules can be set up if you:

  • Navigate to Forms, select Security.

  • Navigate to Online Donations select Security.

The rules are a list of allowed or blocked IP addresses. This list is shared by Forms and Web Widgets so it can be managed in both places. These rules are applied whenever a Web Widget or Form is requested.

Existing request rules are shown in a list, you can update or delete these rules as required.

If a blocking rule was added automatically then information about when it was added and where the requests appear to originate from will be shown. This allows you to decide whether you want to keep the rule or delete the rule.

To add a new Request Rule:

  1. Click Add Request Rule.

  2. Fill in a description for the rule.

  3. Fill in the range of IP addresses the rule applies to, if you only want the rule to apply to one IP address then enter that value in both the From and To IP address.

  4. Indicate whether requests received from the IP addresses in the range should be allowed or blocked.

  5. Click Save Changes.

    To delete a rule or rules, click Delete.

๐Ÿ“ŒNote:

  • The IP addresses added should be the Public IP address, if you need to locate your Public IP address, then you can search via your web browser What is my IP.

  • IP address range to be blocked, please ensure that the lower IP number is in the From IP Address box and the higher IP number is in the To IP Address box.


Donorfy Academy


The Donorfy Academy features a learning course for Donation Forms - enrol here.

Did this answer your question?