Donorfy monitors all form and web widget requests to help identify suspicious behaviour and prevent automated submissions. You can also manage IP-based allow and block rules to control access to your online donation tools.
⚠️ Important: Security rules apply to both Forms and Web Widgets. Any rule created in one area automatically applies to the other.
How Donorfy Identifies and Blocks Suspicious Requests
Donorfy reviews the pattern of requests received from each source. If activity appears suspicious, Donorfy reduces the number of responses it returns. When suspicious behaviour continues, Donorfy blocks all requests from that source and notifies users who are subscribed to suspicious request alerts.
📌 Note: Donorfy tracks request sources using public IP addresses. An IP address identifies the device making the request, similar to how a postal address identifies a building.
How Donorfy Blocks Automated Form Submissions
When a form is submitted, Donorfy runs checks to confirm that the submission appears to be from a real person. If the submission appears automated, Donorfy marks it as spam and prevents it from being processed.
Manage Allow and Block Request Rules
You can manage request rules directly within Donorfy. These rules determine which IP addresses are allowed or blocked when accessing your forms or widgets.
Where to Access Security Settings
You can manage security rules in the following areas:
Forms, then click Security.
Online Donations, then click Security.
Both areas display the same shared list of IP address rules.
Review Existing Rules
Existing rules appear in a list. You can update or delete any rule.
If Donorfy automatically added a blocking rule, the details include when the rule was added and the region associated with the IP address. This information helps you decide whether to keep or remove the rule.
Add a New Request Rule
Go to Forms then click Security, or go to Online Donations then click Security.
Click Add Request Rule, then enter a clear description for the rule.
Enter the IP address range the rule applies to. If the rule applies to a single IP address, enter the same value in both the From and To fields.
Choose whether the IP address range should be Allowed or Blocked.
Click Save to apply the rule.
📌Note:
Use the public IP address for any rule. To find your public IP address, search “What is my IP” in your web browser.
When entering a range, ensure the lower number appears in From IP Address and the higher number appears in To IP Address.
Delete a Rule
Open the Security section in either Forms or Online Donations.
Select the rule you want to remove, then click Delete.
Confirm the deletion to remove the rule.