TYPO3 Core

I think that throwing an exception in this case (that is logged) isn't the best solution.

What do you think about returning a status code 400 - BAD REQUEST in this case?

I strongly support the suggestion of Christian returning a Bad Request instead of an exception.

My reasons:
- the log is really flooded with these exceptions
- in the error log i cant find the IP of the bot so it is quite difficult to search the IP in the server logs for every single error log entry in order to block it.
- i cant see a possiblity to automate this process: exception -> looking for IP -> adding to blacklist of server side spam filter ...

Thanks

Same issue here.
Don't understand why some insist it's correct thowing the exception.

Please understand that the suggested solution to block the "requesting bots" is not a real solution: Had random IP accessing the form, Tokyo, Montreal, Kopenhagen, so... no single rule will match.

How to suppress this message?

Can we please fix this?

Thank you, Thomas

You changed the TYPO3 version from 9 to 8. Does that mean, that you experience the bug in TYPO3 8.7?

Hello,

in case someone comes from google and has a controller with a form integrated:

It is possible to catch the exception and render for instance a 404 instead:

    // This code goes into your controller

    public function processRequest(RequestInterface $request, ResponseInterface $response)
    {
        try {
            parent::processRequest($request, $response);
        } catch (Throwable $exception) {
            // Sometimes bots edit the trusted properties
            // In that case we get an HMAC error
            // Here we catch it
            if(strpos($exception->getMessage(), 'The HMAC') === 0) {
                $this->render404Page();
            }
            throw $exception;
        }
    }

    public function render404Page(): void
    {
        throw new ImmediateResponseException(
            $GLOBALS['TYPO3_REQUEST']
                ->getAttribute('site')
                ->getErrorHandler(404)
                ->handlePageError($GLOBALS['TYPO3_REQUEST'], 'Some bot attack'));
    }

Kind regards
Rozbeh Chiryai Sharahi