Registration Rules

An enhanced reCAPTCHA alternative and anti-spam tool to prevent automated spam bots from creating fake accounts in Moodle.
Moodle Registration Rules
The Registration Rules plugin enhances user account registration control in Moodle by incorporating various anti-spam measures and reCAPTCHA alternatives, to prevent automated spam bots from creating fake accounts.
🚀 List of features
Extend the signup form to include reCAPTCHA alternatives from ALTCHA , Cloudflare Turnstile and hCaptcha
Prevent accounts from being created with disposable email addresses .
Check, warn and/or deny signup if password is listed in the Have I Been Pwned database.
Check and deny signup if IP address, email address or username are listed in the Stop Forum Spam database.
Implement other anti-spam measures such as injecting randomised hidden honeypot fields into the signup form, ensuring users take a minimum amount of time to register, rate limiting the number of allowed signups per session or IP address, and more!
Flexible rules to allow or deny account registration around date/time windows.
Entirely disable user signups with a single click.
Apply reCAPTCHA alternatives and other rules to the forgotten password form for further security.
🧐 How it works
The Registration Rules plugin lets you set up a series of flexible rules to control user signups based on specific conditions. Each rule defines a check that is run during the registration process.
How rules are evaluated:
When a user tries to sign up, the plugin checks their submitted details against the set rules.
Each rule has a score. If the rule’s condition is met, the corresponding score is added to the total.
After all rules are checked, the plugin compares the total score with a configurable threshold.
If the total score is below the threshold then registration is allowed. If it is above the threshold, the registration is denied.
📝How to use