My coworker who receives email about new submissions on a form is reporting hundreds of spam attacks. She says that even though the form is not registering any new submissions, she's still receiving email notifications of submissions! How is that possible?

I've now limited a user to three submissions per hour and placed a Captcha on it.

Comments

quicksketch’s picture

quicksketch
he/him
commented

She says that even though the form is not registering any new submissions, she's still receiving email notifications of submissions! How is that possible?

This really shouldn't be possible. I think the only way this could happen is:

A) The submission is actually getting saved but the user is then deleting the submission after they created it (seems unlikely).
B) There's another module besides Webform that is sending e-mails upon form submission, such as Webform Rules.

quicksketch’s picture

quicksketch
he/him
commented
Status: Active » Closed (fixed)

Closing after lack of activity.