Spam Protection Service

Server-side middleware that enforces per-IP and per-email submission rate limits and validates the honeypot field on incoming booking requests. Prevents automated spam and form flooding without requiring CAPTCHA, preserving accessibility for legitimate users.

Feature: Booking Form

spam-protection-service

• Check and increment per-IP request counters using an in-memory or Redis store
• Check and enforce per-email submission limits within a sliding time window
• Reject requests where the honeypot field is populated
• Return 429 Too Many Requests with Retry-After header when limits are exceeded