NOTE: This mitigation strategy is only applicable to "standalone" customers using our Higher Logic login page (i.e., customers not integrated with a CRM/AMS).

Integrated customers whose login page is hosted in a CRM/AMS may be able to leverage a similar strategy by reaching out to their CRM/AMS provider's support team and requesting a reCAPTCHA be added.

One of the best ways to prevent bots from causing issues on your Higher Logic Community site is to prevent them from logging in. While you may have some public content that could still be vulnerable to bots, most organizations keep their communities and content locked behind a login (i.e., members only), making this an excellent bot-mitigation strategy.

How is login prevention achieved? By implementing a reCAPTCHA feature on your login page. Let's take a look at the steps required to enable this.

Step 1 - Enable reCAPTCHA on your site

This must be completed by Higher Logic, so reach out to our Support team to have the reCAPTCHA feature enabled on your site. To do so, create a case.

Step 2 - Add reCAPTCHA to your login page

Once the feature has been enabled, it's time to add it to your login page.

1. In the Webmaster Links menu, click edit navigation.

2. Locate your login page. By default, its pagecode is login, so the easiest way to find it is to search. Click the magnifying glass icon to expand the search field and enter "login." 
3. In the search results popup, click to select the login page. The popup closes and the page is selected in the CMS.

4. Click the ellipsis menu (...) and select Edit.

5. Click to select the Login and Sign Up widget (called "Login," by default), followed by the edit icon.
6. Toggle the Show Captcha? option to Yes, as shown below.

7. Click Save to save these widget changes.
8. Click Publish to apply this change to your login page.