add ambrosia-container to registration form as honeypot for bots: new form field "username" must not be filled

Author: nesges

app/Access/Controllers/RegisterController.php

@@ -87,6 +87,7 @@ protected function validator(array $data): ValidatorContract
             'name'     => ['required', 'min:2', 'max:100'],
             'email'    => ['required', 'email', 'max:255', 'unique:users'],
             'password' => ['required', Password::default()],
+            'username' => ['prohibited'], // this is a honeypot for bots that must not be filled in
         ]);
     }
 }

resources/sass/_forms.scss

@@ -389,6 +389,17 @@ input[type=color] {
   }
 }
 
+.form-group.ambrosia-container, .form-group.ambrosia-container * {
+    position:absolute;
+    height:0px !important;
+    width:0px !important;
+    margin:0 !important;
+    padding:0 !important;
+    background:transparent !important;
+    color:transparent !important;
+    border:none !important;
+}
+
 .title-input input[type="text"] {
   display: block;
   width: 100%;

resources/views/auth/register.blade.php

@@ -13,6 +13,11 @@
             <form action="{{ url("/register") }}" method="POST" class="mt-l stretch-inputs">
                 {!! csrf_field() !!}
 
+                <div class="form-group ambrosia-container">
+                    <label for="name">{{ trans('auth.name') }}</label>
+                    @include('form.text', ['name' => 'username'])
+                </div>
+
                 <div class="form-group">
                     <label for="name">{{ trans('auth.name') }}</label>
                     @include('form.text', ['name' => 'name'])